diff --git a/package-lock.json b/package-lock.json
index f52f6c1a..5f80a6c1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4143,9 +4143,9 @@
       "dev": true
     },
     "typescript": {
-      "version": "4.2.4",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.2.4.tgz",
-      "integrity": "sha512-V+evlYHZnQkaz8TRBuxTA92yZBPotr5H+WhQ7bD3hZUndx5tGOa1fuCgeSjxAzM1RiN5IzvadIXTVefuuwZCRg==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.3.2.tgz",
+      "integrity": "sha512-zZ4hShnmnoVnAHpVHWpTcxdv7dWP60S2FsydQLV8V5PbS3FifjWFFRiHSWpDJahly88PRyV5teTSLoq4eG7mKw==",
       "dev": true
     },
     "uglify-js": {
diff --git a/package.json b/package.json
index 67e357c7..504234ae 100644
--- a/package.json
+++ b/package.json
@@ -52,6 +52,6 @@
     "prettier": "2.3.0",
     "standard-version": "9.3.0",
     "ts-node": "9.1.1",
-    "typescript": "4.2.4"
+    "typescript": "4.3.2"
   }
 }
diff --git a/src/docker.ts b/src/docker.ts
index 39e405d8..feef690c 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.36.0-slim';
+  readonly tag = '25.36.1-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {