diff --git a/package-lock.json b/package-lock.json
index b2017522..713d01c1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -486,9 +486,9 @@
       }
     },
     "@vercel/ncc": {
-      "version": "0.28.3",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.28.3.tgz",
-      "integrity": "sha512-g3gk4D9itbhUQa5MtN7TOdeoQnNLkPDCox5SBaQ/H3Or5lo59TOaZWrLb+x47StiAJ+8DXZS/9MJ67cIBWSsRw==",
+      "version": "0.28.4",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.28.4.tgz",
+      "integrity": "sha512-vQe8WuBMiBgJbRM9TXMSb2zXmaoplH84K91nd2CmIlrXH0F3RjyiO9kdvaZbKbAQ66Mh/hMF2JPtDzbVvsx+Eg==",
       "dev": true
     },
     "JSONStream": {
diff --git a/package.json b/package.json
index 8569d0a4..46c62ae3 100644
--- a/package.json
+++ b/package.json
@@ -40,7 +40,7 @@
     "@types/node": "13.13.51",
     "@typescript-eslint/eslint-plugin": "4.22.0",
     "@typescript-eslint/parser": "4.22.0",
-    "@vercel/ncc": "0.28.3",
+    "@vercel/ncc": "0.28.4",
     "concurrently": "6.0.2",
     "eslint": "7.25.0",
     "eslint-config-prettier": "8.3.0",
diff --git a/src/docker.ts b/src/docker.ts
index 61f7bad7..bdd5f382 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.16.7-slim';
+  readonly tag = '25.18.0-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {