diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index a46751cbc4a..040eae94426 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/containerbase/devcontainer:13.8.58
+FROM ghcr.io/containerbase/devcontainer:13.8.59
 
 # https://github.com/pnpm/pnpm/issues/8971
 # renovate: datasource=npm
diff --git a/tools/docker/Dockerfile b/tools/docker/Dockerfile
index cbfcb8909d0..3def0d8c86a 100644
--- a/tools/docker/Dockerfile
+++ b/tools/docker/Dockerfile
@@ -5,23 +5,23 @@ ARG BASE_IMAGE_TYPE=slim
 # --------------------------------------
 # slim image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:10.18.6@sha256:be2346b798bb33653f2077e54d397e4bcb21de0e647db93fd6a843e5de86b0bc AS slim-base
+FROM ghcr.io/renovatebot/base-image:10.18.8@sha256:c2810adeeddea4cf688fd36fef033648e851d98177af0abcb977f8baba5663a8 AS slim-base
 
 # --------------------------------------
 # full image
 # --------------------------------------
-FROM ghcr.io/renovatebot/base-image:10.18.6-full@sha256:cfc4a4f8f8d0592156a9a206f2829edcd2e940b33d025fee5853946e961b2fa6 AS full-base
+FROM ghcr.io/renovatebot/base-image:10.18.8-full@sha256:7dda07d00c4d02a49717a0b21de8a31e22b25481762fab58f88debaa29fe204f AS full-base
 
 ENV RENOVATE_BINARY_SOURCE=global
 
 # --------------------------------------
 # build image
 # --------------------------------------
-FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:10.18.6@sha256:be2346b798bb33653f2077e54d397e4bcb21de0e647db93fd6a843e5de86b0bc AS build
+FROM --platform=$BUILDPLATFORM ghcr.io/renovatebot/base-image:10.18.8@sha256:c2810adeeddea4cf688fd36fef033648e851d98177af0abcb977f8baba5663a8 AS build
 
 # We want a specific node version here
 # renovate: datasource=github-releases packageName=containerbase/node-prebuild versioning=node
-RUN install-tool node 22.17.0
+RUN install-tool node 22.17.1
 
 # corepack is too buggy 😞
 # renovate: datasource=npm