diff --git a/package-lock.json b/package-lock.json
index 8d86509d..833fdbd3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3908,9 +3908,9 @@
       "dev": true
     },
     "typescript": {
-      "version": "4.3.4",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.3.4.tgz",
-      "integrity": "sha512-uauPG7XZn9F/mo+7MrsRjyvbxFpzemRjKEZXS4AK83oP2KKOJPvb+9cO/gmnv8arWZvhnjVOXz7B49m1l0e9Ew==",
+      "version": "4.3.5",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.3.5.tgz",
+      "integrity": "sha512-DqQgihaQ9cUrskJo9kIyW/+g0Vxsk8cDtZ52a3NGh0YNTfpUSArXSohyUGnvbPazEPLu398C0UxmKSOrPumUzA==",
       "dev": true
     },
     "uglify-js": {
diff --git a/package.json b/package.json
index 8428b8ef..bbdfaa8a 100644
--- a/package.json
+++ b/package.json
@@ -52,6 +52,6 @@
     "prettier": "2.3.2",
     "standard-version": "9.3.0",
     "ts-node": "9.1.1",
-    "typescript": "4.3.4"
+    "typescript": "4.3.5"
   }
 }
diff --git a/src/docker.ts b/src/docker.ts
index ce36f635..3ce7170a 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '25.52.7-slim';
+  readonly tag = '25.52.8-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {