diff --git a/package-lock.json b/package-lock.json
index 5c10907a..1c7c90e9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -401,9 +401,9 @@
       "dev": true
     },
     "@types/node": {
-      "version": "13.13.51",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-13.13.51.tgz",
-      "integrity": "sha512-66/xg5I5Te4oGi5Jws11PtNmKkZbOPZWyBZZ/l5AOrWj1Dyw+6Ge/JhYTq/2/Yvdqyhrue8RL+DGI298OJ0xcg==",
+      "version": "13.13.52",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-13.13.52.tgz",
+      "integrity": "sha512-s3nugnZumCC//n4moGGe6tkNMyYEdaDBitVjwPxXmR5lnMG5dHePinH2EdxkG3Rh1ghFHHixAG4NJhpJW1rthQ==",
       "dev": true
     },
     "@types/normalize-package-data": {
diff --git a/package.json b/package.json
index 98fb0e76..04df8a45 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
   "devDependencies": {
     "@commitlint/cli": "12.1.3",
     "@commitlint/config-conventional": "12.1.3",
-    "@types/node": "13.13.51",
+    "@types/node": "13.13.52",
     "@typescript-eslint/eslint-plugin": "4.23.0",
     "@typescript-eslint/parser": "4.23.0",
     "@vercel/ncc": "0.28.5",
diff --git a/src/docker.ts b/src/docker.ts
index c7e681e8..f02376da 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.23.0-slim';
+  readonly tag = '25.25.0-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {