diff --git a/package-lock.json b/package-lock.json
index 4675bab6..9536f76a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -383,9 +383,9 @@
       "dev": true
     },
     "@types/node": {
-      "version": "13.13.24",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-13.13.24.tgz",
-      "integrity": "sha512-ry1JlHIVcmQFNq5KWgdEo1NVu7qFDi+vQPknWWDCc05cekTLVr2y0FHAKXTfv4OLWw+GOzdVe8eFWPoYEdk05w==",
+      "version": "13.13.25",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-13.13.25.tgz",
+      "integrity": "sha512-6ZMK4xRcF2XrPdKmPYQxZkdHKV18xKgUFVvhIgw2iwaaO6weleLPHLBGPZmLhjo+m1N+MZXRAoBEBCCVqgO2zQ==",
       "dev": true
     },
     "@types/normalize-package-data": {
diff --git a/package.json b/package.json
index ed9b49bd..7a9ec5c5 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
   "devDependencies": {
     "@commitlint/cli": "11.0.0",
     "@commitlint/config-conventional": "11.0.0",
-    "@types/node": "13.13.24",
+    "@types/node": "13.13.25",
     "@typescript-eslint/eslint-plugin": "4.4.0",
     "@typescript-eslint/parser": "4.4.0",
     "@zeit/ncc": "0.22.3",
diff --git a/src/docker.ts b/src/docker.ts
index a39c0667..3ee9cdae 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '23.44.2-slim';
+  readonly tag = '23.44.3-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {