diff --git a/package.json b/package.json
index 16fc435c..7c45e13f 100644
--- a/package.json
+++ b/package.json
@@ -41,7 +41,7 @@
     "@types/node": "13.13.52",
     "@typescript-eslint/eslint-plugin": "4.33.0",
     "@typescript-eslint/parser": "4.33.0",
-    "@vercel/ncc": "0.31.1",
+    "@vercel/ncc": "0.32.0",
     "eslint": "7.32.0",
     "eslint-config-prettier": "8.3.0",
     "eslint-plugin-json": "3.1.0",
diff --git a/src/docker.ts b/src/docker.ts
index 061977be..c14f56c3 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '29.18.1-slim';
+  readonly tag = '29.23.1-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {
diff --git a/yarn.lock b/yarn.lock
index 83055972..85f658be 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -388,10 +388,10 @@
     "@typescript-eslint/types" "4.33.0"
     eslint-visitor-keys "^2.0.0"
 
-"@vercel/ncc@0.31.1":
-  version "0.31.1"
-  resolved "https://registry.yarnpkg.com/@vercel/ncc/-/ncc-0.31.1.tgz#9346c7e59326f5eeac75c0286e47df94c2d6d8f7"
-  integrity sha512-g0FAxwdViI6UzsiVz5HssIHqjcPa1EHL6h+2dcJD893SoCJaGdqqgUF09xnMW6goWnnhbLvgiKlgJWrJa+7qYA==
+"@vercel/ncc@0.32.0":
+  version "0.32.0"
+  resolved "https://registry.yarnpkg.com/@vercel/ncc/-/ncc-0.32.0.tgz#42faafe0f41ea2a8e857785c10a31ef122f2416e"
+  integrity sha512-S/SxTHHTbBQSOutpgnqEn+LyTfZcq9xMRAnzY05HpGVjxjmfmvg6SWZZkbW/GJIFznMmHGeGOrI1MEBD7efIkA==
 
 JSONStream@^1.0.4:
   version "1.3.5"