diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
index 4c0cba9e..cf2d24a5 100644
--- a/.github/workflows/semgrep.yml
+++ b/.github/workflows/semgrep.yml
@@ -16,7 +16,7 @@ jobs:
     env:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
     container:
-      image: returntocorp/semgrep@sha256:f4791a54c891eabe1188248135574e6e03dfc31dfd3f3b747c7bec7079bfed1b # latest
+      image: returntocorp/semgrep@sha256:c180f0c93a17b420c0af5006214a29d3c747c5459c732b740191adf657dd0068 # latest
     steps:
     - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
     - run: semgrep ci
diff --git a/package.json b/package.json
index 8861ead8..4df9639a 100644
--- a/package.json
+++ b/package.json
@@ -3,10 +3,10 @@
   "author": "The OpenINF Authors & Friends",
   "private": "true",
   "description": "The OpenINF portal, other static resources, and more static electricity",
-  "packageManager": "pnpm@10.34.3",
+  "packageManager": "pnpm@10.34.4",
   "engines": {
-    "node": "22.22.3",
-    "pnpm": "10.34.3"
+    "node": "22.23.0",
+    "pnpm": "10.34.4"
   },
   "exports": {
     "./build/constants": "./build/shared/constants.mjs",