diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index aaa133f..bf700a5 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -14,3 +14,9 @@ updates:
     schedule:
       interval: "daily"
     open-pull-requests-limit: 10
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10
diff --git a/Dockerfile b/Dockerfile
index 3598370..374bee3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 ARG BUILD_IMAGE=ghcr.io/arlind-dev/sulej.ch:build-latest
 FROM --platform=$BUILDPLATFORM ${BUILD_IMAGE} AS build
 
-FROM nginx:alpine
+FROM nginx:1.29.2-alpine3.22
 
 ARG BUILD_IMAGE
 
@@ -9,4 +9,4 @@ WORKDIR /usr/share/nginx/html
 COPY --from=build /output ./
 
 EXPOSE 80
-CMD ["nginx", "-g", "daemon off;"]
+CMD ["nginx", "-g", "daemon off;"]
\ No newline at end of file
diff --git a/Dockerfile.build b/Dockerfile.build
index b21fc15..35fec84 100644
--- a/Dockerfile.build
+++ b/Dockerfile.build
@@ -1,8 +1,9 @@
-FROM node:alpine AS build
+FROM node:22.11.0-alpine3.20 AS build
 
 WORKDIR /app
 
-RUN npm install -g --force corepack && corepack enable && corepack prepare pnpm@latest --activate
+RUN npm install -g --force corepack \
+	&& corepack enable
 
 COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile