diff --git a/.drone.yml b/.drone.yml
index a70d0ba..c3acfea 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -17,12 +17,12 @@ steps:
   - name: reuse
     image: fsfe/reuse:5.0.2-debian@sha256:7928d25ed14a1bc22758d917ebc6aecbb8bcd1a4da7aa748d7179c9011bbfb0b
   - name: lint
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.2-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4
     commands:
       - npm ci
       - npm run lint -- --no-fix
   - name: audit
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.2-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4
     commands:
       - npm install -g better-npm-audit
       - better-npm-audit audit --production --level=moderate
@@ -104,7 +104,7 @@ steps:
   - name: reuse
     image: fsfe/reuse:5.0.2-debian@sha256:7928d25ed14a1bc22758d917ebc6aecbb8bcd1a4da7aa748d7179c9011bbfb0b
   - name: lint
-    image: node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a
+    image: node:20.18.2-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4
     commands:
       - npm ci
       - npm run lint -- --no-fix
diff --git a/Dockerfile b/Dockerfile
index 96de9f7..709de9b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: AGPL-3.0-or-later
 
-FROM node:20.18.1-alpine@sha256:e44837841abf6177b308a7c627c8fd7820c1ae6ed09ffa4d60d700e5fbba1b1a as builder
+FROM node:20.18.2-alpine@sha256:2cd2a6f4cb37cf8a007d5f1e9aef090ade6b62974c7a274098c390599e8c72b4 as builder
 
 COPY package.json package-lock.json ./
 RUN npm install