diff --git a/package-lock.json b/package-lock.json
index 030beab5..312e6bce 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -486,9 +486,9 @@
       }
     },
     "@vercel/ncc": {
-      "version": "0.28.4",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.28.4.tgz",
-      "integrity": "sha512-vQe8WuBMiBgJbRM9TXMSb2zXmaoplH84K91nd2CmIlrXH0F3RjyiO9kdvaZbKbAQ66Mh/hMF2JPtDzbVvsx+Eg==",
+      "version": "0.28.5",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.28.5.tgz",
+      "integrity": "sha512-ZSwD4EDCon2EsnPZ2/Qcigx4N2DiuBLV/rDnF04giEPFuDeBeUDdnSTyYYfX8KNic/prrJuS1vUEmAOHmj+fRg==",
       "dev": true
     },
     "JSONStream": {
diff --git a/package.json b/package.json
index 6b25b986..d4a59451 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "@types/node": "13.13.51",
     "@typescript-eslint/eslint-plugin": "4.22.0",
     "@typescript-eslint/parser": "4.22.0",
-    "@vercel/ncc": "0.28.4",
+    "@vercel/ncc": "0.28.5",
     "concurrently": "6.0.2",
     "eslint": "7.25.0",
     "eslint-config-prettier": "8.3.0",
diff --git a/src/docker.ts b/src/docker.ts
index 9543aa4b..331e2c90 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.18.1-slim';
+  readonly tag = '25.18.2-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {