diff --git a/.drone.yml b/.drone.yml
index a70d0ba..4b0c440 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -17,12 +17,12 @@ steps:
   - name: reuse
     image: fsfe/reuse:5.0.2-debian@sha256:7928d25ed14a1bc22758d917ebc6aecbb8bcd1a4da7aa748d7179c9011bbfb0b
   - name: lint
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.3-alpine@sha256:50b130887a98e486bbe99c5ca92a3474652d3d4192dbadc3341c163bcbbf46f6
     commands:
       - npm ci
       - npm run lint -- --no-fix
   - name: audit
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.3-alpine@sha256:50b130887a98e486bbe99c5ca92a3474652d3d4192dbadc3341c163bcbbf46f6
     commands:
       - npm install -g better-npm-audit
       - better-npm-audit audit --production --level=moderate
@@ -104,7 +104,7 @@ steps:
   - name: reuse
     image: fsfe/reuse:5.0.2-debian@sha256:7928d25ed14a1bc22758d917ebc6aecbb8bcd1a4da7aa748d7179c9011bbfb0b
   - name: lint
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.3-alpine@sha256:50b130887a98e486bbe99c5ca92a3474652d3d4192dbadc3341c163bcbbf46f6
     commands:
       - npm ci
       - npm run lint -- --no-fix
diff --git a/Dockerfile b/Dockerfile
index 96de9f7..609a439 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a as builder
+FROM node:20.18.3-alpine@sha256:50b130887a98e486bbe99c5ca92a3474652d3d4192dbadc3341c163bcbbf46f6 as builder
 
 COPY package.json package-lock.json ./
 RUN npm install