diff --git a/Dockerfile b/Dockerfile
index 687c9043ea..325168a278 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # The base image is the latest 8.x node (LTS)
-FROM node:8.11.4@sha256:cd8ebd022c01f519eb58a98fcbb05c1d1195ac356ef01851036671ec9e9d5580
+FROM node:8.11.4@sha256:3422df4f7532b26b55275ad7b6dc17ec35f77192b04ce22e62e43541f3d28eb3
 
 RUN mkdir -p /usr/src/app
 WORKDIR /usr/src/app
diff --git a/install/package.json b/install/package.json
index fae7bfe553..e725d96b9e 100644
--- a/install/package.json
+++ b/install/package.json
@@ -36,7 +36,7 @@
         "connect-mongo": "2.0.1",
         "connect-multiparty": "^2.1.0",
         "connect-pg-simple": "^5.0.0",
-        "connect-redis": "3.3.3",
+        "connect-redis": "3.4.0",
         "continuation-local-storage": "^3.2.1",
         "cookie-parser": "^1.4.3",
         "cron": "^1.3.0",
@@ -71,7 +71,7 @@
         "nodebb-plugin-emoji": "^2.2.5",
         "nodebb-plugin-emoji-android": "2.0.0",
         "nodebb-plugin-markdown": "8.8.0",
-        "nodebb-plugin-mentions": "2.2.9",
+        "nodebb-plugin-mentions": "2.2.10",
         "nodebb-plugin-soundpack-default": "1.0.0",
         "nodebb-plugin-spam-be-gone": "0.5.4",
         "nodebb-rewards-essentials": "0.0.11",
@@ -85,7 +85,7 @@
         "passport-local": "1.0.0",
         "pg": "^7.4.0",
         "pg-cursor": "^1.3.0",
-        "postcss": "7.0.3",
+        "postcss": "7.0.5",
         "postcss-clean": "1.1.0",
         "promise-polyfill": "^8.0.0",
         "prompt": "^1.0.0",
@@ -96,7 +96,7 @@
         "sanitize-html": "^1.16.3",
         "semver": "^5.4.1",
         "serve-favicon": "^2.4.5",
-        "sharp": "0.20.8",
+        "sharp": "0.21.0",
         "sitemap": "^1.13.0",
         "socket.io": "2.1.1",
         "socket.io-adapter-cluster": "^1.0.1",
@@ -123,7 +123,7 @@
         "eslint-plugin-import": "2.14.0",
         "grunt": "1.0.3",
         "grunt-contrib-watch": "1.1.0",
-        "jsdom": "12.0.0",
+        "jsdom": "12.1.0",
         "mocha": "5.2.0",
         "mocha-lcov-reporter": "1.3.0",
         "nyc": "13.0.1",