diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b6a5aa00..ac85428b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Lint commit messages
-        uses: wagoid/commitlint-github-action@d608cb14eff8344e2ecf456e89f03f5c172884b3 # tag=v4.1.12
+        uses: wagoid/commitlint-github-action@416045160973f9fff174ac6698412cfe7181c3f3 # tag=v4.1.15
         continue-on-error: true
 
   lint:
diff --git a/src/docker.ts b/src/docker.ts
index 8f224126..c7eb6670 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '32.88.0-slim';
+  readonly tag = '32.89.0-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {