diff --git a/Dockerfile b/Dockerfile
index b4f9b7b..f406b12 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 FROM oven/bun:1.3.4@sha256:7608db4aeb44f1fe8169cc8ec7055376b3013557b106407ccf092b00e426407d AS bun
-FROM node:22.21.1-trixie-slim@sha256:98e1429d1a0b99378b4de43fa385f0746fd6276faf4feeb6104d91f6bad290f9
+FROM node:22.21.1-trixie-slim@sha256:50d7d95c827a32646b67c488b70f661725381356133884aca05cd658c32ff53c
 COPY --from=bun /usr/local/bin/bun \
                 /usr/local/bin/bunx \
                 /usr/local/bin/
diff --git a/compose.yml b/compose.yml
index 31f8c69..4efce97 100644
--- a/compose.yml
+++ b/compose.yml
@@ -35,7 +35,7 @@ services:
 
   webapp:
     <<: *service-base
-    image: node:22.21.1@sha256:4ad2c2b350ab49fb637ab40a269ffe207c61818bb7eb3a4ea122001a0c605e1f
+    image: node:22.21.1@sha256:c8abd8da9cfddd2dfd2d5aa9ea2e54f9f70d3968ecf81bf5c2422594fa13fa83
     ports:
       - ${PORT:?PORT missing}:80
     volumes:
@@ -48,7 +48,7 @@ services:
 
   tempo:
     <<: *service-base
-    image: grafana/tempo:latest@sha256:cfe9b6a2e9730f3acb4437727a25e481554a7e00685c6170af73ac52c46c9707
+    image: grafana/tempo:latest@sha256:05a2694b3ddbe50497d33d21a8f46d607bb9c7a5d92d46df0180d9a16279d492
     command: [-config.file=/etc/tempo.yaml]
     volumes:
       - ./telemetry/tempo.yaml:/etc/tempo.yaml
@@ -56,7 +56,7 @@ services:
     stop_signal: SIGKILL
 
   prometheus:
-    image: prom/prometheus:v3.8.0@sha256:d936808bdea528155c0154a922cd42fd75716b8bb7ba302641350f9f3eaeba09
+    image: prom/prometheus:v3.8.1@sha256:2b6f734e372c1b4717008f7d0a0152316aedd4d13ae17ef1e3268dbfaf68041b
     command:
       - --config.file=/etc/prometheus.yaml
       - --web.enable-remote-write-receiver