diff --git a/Dockerfile b/Dockerfile
index 697c941e..53c53161 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.19
+# syntax=docker/dockerfile:1.20
 FROM node:lts-alpine AS builder
 
 WORKDIR /sqnc-attachment-api
diff --git a/docker-compose-test.yml b/docker-compose-test.yml
index cbc32eca..b666d0d8 100644
--- a/docker-compose-test.yml
+++ b/docker-compose-test.yml
@@ -1,6 +1,6 @@
 services:
   postgres-attachment-api:
-    image: postgres:18.0-alpine
+    image: postgres:18.1-alpine
     container_name: postgres-attachment-api
     ports:
       - 5432:5432
@@ -12,7 +12,7 @@ services:
       - POSTGRES_DB=sqnc-attachment-api
 
   keycloak:
-    image: quay.io/keycloak/keycloak:26.4.2
+    image: quay.io/keycloak/keycloak:26.5.0
     container_name: keycloak
     environment:
       - KEYCLOAK_ADMIN=admin
diff --git a/docker-compose.yml b/docker-compose.yml
index ea7e7916..e3633bdc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -29,7 +29,7 @@ services:
       - IDP_INTERNAL_CLIENT_SECRET=secret
 
   postgres-attachment-api:
-    image: postgres:18.0-alpine
+    image: postgres:18.1-alpine
     container_name: postgres-attachment-api
     ports:
       - 5432:5432
@@ -46,7 +46,7 @@ services:
       retries: 5
 
   postgres-identity-service:
-    image: postgres:18.0-alpine
+    image: postgres:18.1-alpine
     container_name: postgres-identity
     ports:
       - 5433:5432
@@ -63,7 +63,7 @@ services:
       retries: 5
 
   sqnc-identity-service:
-    image: digicatapult/sqnc-identity-service:v4.2.114
+    image: digicatapult/sqnc-identity-service:v4.2.138
     container_name: identity-service
     depends_on:
       postgres-identity-service:
@@ -120,7 +120,7 @@ services:
       - IPFS_PORT=5001
 
   postgres-attachment-api-b:
-    image: postgres:18.0-alpine
+    image: postgres:18.1-alpine
     container_name: postgres-attachment-api-b
     ports:
       - 5434:5432
@@ -136,7 +136,7 @@ services:
       timeout: 5s
       retries: 5
   sqnc-identity-service-b:
-    image: digicatapult/sqnc-identity-service:v4.2.114
+    image: digicatapult/sqnc-identity-service:v4.2.138
     container_name: identity-service-b
     depends_on:
       postgres-identity-service-b:
@@ -161,7 +161,7 @@ services:
       - LOG_LEVEL=debug
 
   postgres-identity-service-b:
-    image: postgres:18.0-alpine
+    image: postgres:18.1-alpine
     container_name: postgres-identity-service-b
     ports:
       - 5435:5432
@@ -196,7 +196,7 @@ services:
     restart: on-failure
 
   ipfs:
-    image: ipfs/go-ipfs:v0.38.2
+    image: ipfs/go-ipfs:v0.39.0
     container_name: ipfs
     environment:
       - |
@@ -221,7 +221,7 @@ services:
     command: server /data --console-address ":9001"
 
   keycloak:
-    image: quay.io/keycloak/keycloak:26.4.2
+    image: quay.io/keycloak/keycloak:26.5.0
     container_name: keycloak
     environment:
       - KEYCLOAK_ADMIN=admin
diff --git a/package-lock.json b/package-lock.json
index 948d9abc..2f361f52 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@digicatapult/sqnc-attachment-api",
-  "version": "3.3.60",
+  "version": "3.3.101",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@digicatapult/sqnc-attachment-api",
-      "version": "3.3.60",
+      "version": "3.3.101",
       "license": "Apache-2.0",
       "dependencies": {
         "@digicatapult/tsoa-oauth-express": "^2.0.59",
diff --git a/package.json b/package.json
index f09157b6..1e601d73 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@digicatapult/sqnc-attachment-api",
-  "version": "3.3.60",
+  "version": "3.3.101",
   "description": "An OpenAPI Matchmaking API service for SQNC",
   "main": "src/index.ts",
   "type": "module",