diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2b7ea1a94..e7b094973 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -66,7 +66,7 @@ jobs:
           version: 0.11.0
 
       - name: Install cargo-zigbuild
-        run: curl -L https://github.com/rust-cross/cargo-zigbuild/releases/download/v0.18.3/cargo-zigbuild-v0.18.3.x86_64-unknown-linux-musl.tar.gz | tar -z -x -C /usr/local/bin
+        run: curl -L https://github.com/rust-cross/cargo-zigbuild/releases/download/v0.18.4/cargo-zigbuild-v0.18.4.x86_64-unknown-linux-musl.tar.gz | tar -z -x -C /usr/local/bin
 
       - name: Download the macOS SDK
         run: curl -L "https://github.com/phracker/MacOSX-SDKs/releases/download/11.3/MacOSX11.3.sdk.tar.xz" | tar -J -x -C /opt
@@ -74,7 +74,7 @@ jobs:
       - name: Install frontend Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Install frontend Node dependencies
         working-directory: ./frontend
@@ -241,7 +241,7 @@ jobs:
             base.cache-to=type=registry,ref=${{ env.BUILDCACHE }}:buildcache,mode=max
 
       - name: Transform bake output
-        # This transforms the ouput to an object which lookes like this:
+        # This transforms the ouput to an object which looks like this:
         # { reguar: { digest: "…", tags: ["…", "…"] }, debug: { digest: "…", tags: ["…"] }, … }
         id: output
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8c0de924b..b5e4aae87 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -57,7 +57,7 @@ jobs:
       - name: Install Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Install Node dependencies
         working-directory: ./frontend
@@ -82,7 +82,7 @@ jobs:
       - name: Install Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Install Node dependencies
         working-directory: ./frontend
@@ -155,7 +155,7 @@ jobs:
       - name: Install Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Install Node dependencies
         working-directory: ./frontend
@@ -251,7 +251,7 @@ jobs:
       - name: Install Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Install Node dependencies
         working-directory: ./frontend
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index a73f2df17..bf6d99583 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -137,7 +137,7 @@ jobs:
       - name: Download grcov
         run: |
           mkdir -p "${HOME}/.local/bin"
-          curl -sL https://github.com/mozilla/grcov/releases/download/v0.8.18/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar jxf - -C "${HOME}/.local/bin"
+          curl -sL https://github.com/mozilla/grcov/releases/download/v0.8.19/grcov-x86_64-unknown-linux-gnu.tar.bz2 | tar jxf - -C "${HOME}/.local/bin"
           echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Run test suite with profiling enabled
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 145a1e1a2..8f1de8c70 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -33,12 +33,12 @@ jobs:
       - name: Setup mdBook
         uses: peaceiris/actions-mdbook@v2.0.0
         with:
-          mdbook-version: '0.4.32'
+          mdbook-version: '0.4.37'
 
       - name: Install Node
         uses: actions/setup-node@v4.0.2
         with:
-          node-version: 18
+          node-version: 20
 
       - name: Build the documentation
         run: sh misc/build-docs.sh
diff --git a/Dockerfile b/Dockerfile
index 678500be0..56b229571 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-# syntax = docker/dockerfile:1.6
+# syntax = docker/dockerfile:1.7.1
 
 # Builds a minimal image with the binary only. It is multi-arch capable,
 # cross-building to aarch64 and x86_64. When cross-compiling, Docker sets two
@@ -12,11 +12,11 @@ ARG RUSTC_VERSION=1.78.0
 # XXX: Upgrade to 0.10.0 blocked by https://github.com/ziglang/zig/issues/10915#issuecomment-1354548110
 # XXX: Upgrade to 0.11.0 blocked by https://github.com/rust-cross/cargo-zigbuild/issues/162
 ARG ZIG_VERSION=0.9.1
-ARG NODEJS_VERSION=20.9.0
+ARG NODEJS_VERSION=20.12.2
 ARG OPA_VERSION=0.64.1
-ARG CARGO_AUDITABLE_VERSION=0.6.2
-ARG CARGO_CHEF_VERSION=0.1.64
-ARG CARGO_ZIGBUILD_VERSION=0.18.3
+ARG CARGO_AUDITABLE_VERSION=0.6.3
+ARG CARGO_CHEF_VERSION=0.1.66
+ARG CARGO_ZIGBUILD_VERSION=0.18.4
 
 ##########################################
 ## Build stage that builds the frontend ##