diff --git a/Dockerfile b/Dockerfile
index 71cb6be..3040255 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 FROM oven/bun:1.3.1@sha256:9c5d3c92b234b4708198577d2f39aab7397a242a40da7c2f059e51b9dc62b408 AS bun
-FROM node:22.21.0-trixie-slim@sha256:569753d685702eec9855b1bf2fdcc003e8ee47f1915f9a4e4e38fc6a880c7612
+FROM node:22.21.1-trixie-slim@sha256:201589f5a2dcf80775d1397b0c00ed05a7efe10c263075222d2c5ade13d5202b
 COPY --from=bun /usr/local/bin/bun \
                 /usr/local/bin/bunx \
                 /usr/local/bin/
diff --git a/compose.yml b/compose.yml
index 8b372ce..ebb97c3 100644
--- a/compose.yml
+++ b/compose.yml
@@ -35,7 +35,7 @@ services:
 
   webapp:
     <<: *service-base
-    image: node:22.21.0@sha256:23c24e85395992be118734a39903e08c8f7d1abc73978c46b6bda90060091a49
+    image: node:22.21.1@sha256:22ab967fdf8d9ce32387d0c06ab2e32c6793d860bb93ccce6e27927ccdfeee6d
     ports:
       - ${PORT:?PORT missing}:80
     volumes:
@@ -48,7 +48,7 @@ services:
 
   tempo:
     <<: *service-base
-    image: grafana/tempo:latest@sha256:bbb7c84ba5b9d03203aa7f35c038ea2e770336e041dc0eecb0798d4d7fcac15b
+    image: grafana/tempo:latest@sha256:56528c858bfdfd64ae28b4d2ee825e3ac50e2315eb4e08de94364d0587aff364
     command: [-config.file=/etc/tempo.yaml]
     volumes:
       - ./telemetry/tempo.yaml:/etc/tempo.yaml
@@ -56,7 +56,7 @@ services:
     stop_signal: SIGKILL
 
   prometheus:
-    image: prom/prometheus:v3.7.2@sha256:23031bfe0e74a13004252caaa74eccd0d62b6c6e7a04711d5b8bf5b7e113adc7
+    image: prom/prometheus:v3.7.3@sha256:49214755b6153f90a597adcbff0252cc61069f8ab69ce8411285cd4a560e8038
     command:
       - --config.file=/etc/prometheus.yaml
       - --web.enable-remote-write-receiver