diff --git a/.tool-versions b/.tool-versions
index fda00118..62e60d9b 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,3 +1,3 @@
-nodejs 20.17.0
+nodejs 20.18.1
 pnpm 9.11.0
 yarn 1.22.22
diff --git a/Dockerfile b/Dockerfile
index 2b9a5e65..db795bed 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Keep in sync with Dockerfile.autoindex
-FROM node:20.8.1-alpine3.18@sha256:1ccb0c0ded3b21cee95fe6b6ce1ac23bd6680c8f152cbfb3047d5d9ea490b098
+FROM node:20.13.1-alpine3.18@sha256:53108f67824964a573ea435fed258f6cee4d88343e9859a99d356883e71b490c
 
 ARG TAG
 
diff --git a/Dockerfile.autoindex b/Dockerfile.autoindex
index 94e11631..0c80c4fd 100644
--- a/Dockerfile.autoindex
+++ b/Dockerfile.autoindex
@@ -1,5 +1,5 @@
 # Keep in sync with default Dockerfile
-FROM node:20.8.1-alpine3.18@sha256:1ccb0c0ded3b21cee95fe6b6ce1ac23bd6680c8f152cbfb3047d5d9ea490b098
+FROM node:20.13.1-alpine3.18@sha256:53108f67824964a573ea435fed258f6cee4d88343e9859a99d356883e71b490c
 
 ENV NODE_OPTIONS=--max-old-space-size=4096
 
diff --git a/package.json b/package.json
index 8888d19f..0e1ad797 100644
--- a/package.json
+++ b/package.json
@@ -44,7 +44,7 @@
     "@sourcegraph/tsconfig": "4.0.1",
     "@types/diff": "6.0.0",
     "@types/google-protobuf": "3.15.12",
-    "@types/node": "20.16.10",
+    "@types/node": "20.17.9",
     "@types/progress": "2.0.7",
     "@typescript-eslint/eslint-plugin": "^7.18.0",
     "@typescript-eslint/parser": "^7.18.0",
diff --git a/yarn.lock b/yarn.lock
index 70158982..f42ecc78 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -424,10 +424,10 @@
   resolved "https://registry.npmjs.org/@types/json5/-/json5-0.0.29.tgz"
   integrity sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==
 
-"@types/node@*", "@types/node@20.16.10":
-  version "20.16.10"
-  resolved "https://registry.yarnpkg.com/@types/node/-/node-20.16.10.tgz#0cc3fdd3daf114a4776f54ba19726a01c907ef71"
-  integrity sha512-vQUKgWTjEIRFCvK6CyriPH3MZYiYlNy0fKiEYHWbcoWLEgs4opurGGKlebrTLqdSMIbXImH6XExNiIyNUv3WpA==
+"@types/node@*", "@types/node@20.17.9":
+  version "20.17.9"
+  resolved "https://registry.yarnpkg.com/@types/node/-/node-20.17.9.tgz#5f141d4b7ee125cdee5faefe28de095398865bab"
+  integrity sha512-0JOXkRyLanfGPE2QRCwgxhzlBAvaRdCNMcvbd7jFfpmD4eEXll7LRwy5ymJmyeZqk7Nh7eD2LeUyQ68BbndmXw==
   dependencies:
     undici-types "~6.19.2"