diff --git a/src/shadowbox/docker/Dockerfile b/src/shadowbox/docker/Dockerfile
index d8dc7fd3..c040e589 100644
--- a/src/shadowbox/docker/Dockerfile
+++ b/src/shadowbox/docker/Dockerfile
@@ -37,7 +37,7 @@ RUN ROOT_DIR=/ npm run action shadowbox/server/build
 FROM ${NODE_IMAGE}
 
 # Save metadata on the software versions we are using.
-LABEL shadowbox.node_version=16.12.0
+LABEL shadowbox.node_version=16.14.0
 
 ARG GITHUB_RELEASE
 LABEL shadowbox.github.release="${GITHUB_RELEASE}"
diff --git a/src/shadowbox/docker/build.action.sh b/src/shadowbox/docker/build.action.sh
index fbbcc352..59010bdb 100755
--- a/src/shadowbox/docker/build.action.sh
+++ b/src/shadowbox/docker/build.action.sh
@@ -19,9 +19,9 @@ export DOCKER_CONTENT_TRUST="${DOCKER_CONTENT_TRUST:-1}"
 export DOCKER_BUILDKIT=1
 
 # Newer node images have no valid content trust data.
-# Pin the image node:16.12-alpine3.14 by hash.
+# Pin the image node:16.14.0-alpine3.15 by hash.
 # See versions at https://hub.docker.com/_/node/
-readonly NODE_IMAGE="node@sha256:b45a4d2e291af6ed859c8e54d4f70389443373b9293c469b80b5435046127a75"
+readonly NODE_IMAGE="node@sha256:425c81a04546a543da824e67c91d4a603af16fbc3d875ee2f276acf8ec2b1577"
 
 # Doing an explicit `docker pull` of the container base image to work around an issue where
 # Travis fails to pull the base image when using BuildKit. Seems to be related to: