diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index cd4490dad..a3d196a90 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -373,7 +373,7 @@
     },
     "//private/extensions:node.bzl%node": {
       "general": {
-        "bzlTransitiveDigest": "t4AUqjdu1M9C3McfvkQfJ0+cuBjKGVhgpifMU4XnQDU=",
+        "bzlTransitiveDigest": "SFuGhfYOFhVM+yLXFJYe8L7CDRq50bnISc8xlWtBnTQ=",
         "usagesDigest": "jfY8t0NjCRCd6EHCzjWx/9/crrCpG+yo9QCR6Xgp4YY=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
@@ -383,12 +383,12 @@
             "bzlFile": "@@//private/extensions:node.bzl",
             "ruleClassName": "node_archive",
             "attributes": {
-              "sha256": "2356de20cb33798690c90270b557e690c34cfd67525e32a0a6301a8176ce0bd8",
-              "strip_prefix": "node-v18.20.4-linux-ppc64le/",
+              "sha256": "1f916c66f96d9265394e3145bfa92be918abbb45ac9711a441cce99d76618f4a",
+              "strip_prefix": "node-v18.20.5-linux-ppc64le/",
               "urls": [
-                "https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-ppc64le.tar.gz"
+                "https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-ppc64le.tar.gz"
               ],
-              "version": "18.20.4",
+              "version": "18.20.5",
               "architecture": "ppc64le",
               "control": "@@//nodejs:control"
             }
@@ -397,12 +397,12 @@
             "bzlFile": "@@//private/extensions:node.bzl",
             "ruleClassName": "node_archive",
             "attributes": {
-              "sha256": "f4e0b8b1a89e5d6529e517d57b42ac5cbab0562d86e88566d8e90578257e2b16",
-              "strip_prefix": "node-v18.20.4-linux-arm64/",
+              "sha256": "759cfb9f76a1019daf65db9c2e5e43074ee660ec9b9ff3f31dcc4a88cca671e9",
+              "strip_prefix": "node-v18.20.5-linux-arm64/",
               "urls": [
-                "https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-arm64.tar.gz"
+                "https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-arm64.tar.gz"
               ],
-              "version": "18.20.4",
+              "version": "18.20.5",
               "architecture": "arm64",
               "control": "@@//nodejs:control"
             }
@@ -453,12 +453,12 @@
             "bzlFile": "@@//private/extensions:node.bzl",
             "ruleClassName": "node_archive",
             "attributes": {
-              "sha256": "654ee94e5695f4c97dc1adc03cf833763ba62865fefb057af7258a20a87be51c",
-              "strip_prefix": "node-v18.20.4-linux-s390x/",
+              "sha256": "e9ca8239a1256ff66ecd156bf42e88eaad7a1276c421c1c5fd0d6936dcc59300",
+              "strip_prefix": "node-v18.20.5-linux-s390x/",
               "urls": [
-                "https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-s390x.tar.gz"
+                "https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-s390x.tar.gz"
               ],
-              "version": "18.20.4",
+              "version": "18.20.5",
               "architecture": "s390x",
               "control": "@@//nodejs:control"
             }
@@ -481,12 +481,12 @@
             "bzlFile": "@@//private/extensions:node.bzl",
             "ruleClassName": "node_archive",
             "attributes": {
-              "sha256": "c4b0827dc47609d0a8379e6de6c74b3934da0b1312c733b5ebdcac16e3f1e954",
-              "strip_prefix": "node-v18.20.4-linux-x64/",
+              "sha256": "e7b80346bb586790ac6b29aa25c96716fcdf6039a6929c2ed506cec09cebc3c0",
+              "strip_prefix": "node-v18.20.5-linux-x64/",
               "urls": [
-                "https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-x64.tar.gz"
+                "https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-x64.tar.gz"
               ],
-              "version": "18.20.4",
+              "version": "18.20.5",
               "architecture": "amd64",
               "control": "@@//nodejs:control"
             }
@@ -495,12 +495,12 @@
             "bzlFile": "@@//private/extensions:node.bzl",
             "ruleClassName": "node_archive",
             "attributes": {
-              "sha256": "ce311e7167c8cc0392753119dad55291842c2f4aa7a87a093144fc9338f35b61",
-              "strip_prefix": "node-v18.20.4-linux-armv7l/",
+              "sha256": "8d358452e4fcf34b0dcf51a441ec8cf192f8ff83bdd4488708dcab18e8007621",
+              "strip_prefix": "node-v18.20.5-linux-armv7l/",
               "urls": [
-                "https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-armv7l.tar.gz"
+                "https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-armv7l.tar.gz"
               ],
-              "version": "18.20.4",
+              "version": "18.20.5",
               "architecture": "arm",
               "control": "@@//nodejs:control"
             }
diff --git a/nodejs/testdata/nodejs18.yaml b/nodejs/testdata/nodejs18.yaml
index e7d2d5d1e..3538be827 100644
--- a/nodejs/testdata/nodejs18.yaml
+++ b/nodejs/testdata/nodejs18.yaml
@@ -3,4 +3,4 @@ commandTests:
   - name: nodejs
     command: "/nodejs/bin/node"
     args: ["--version"]
-    expectedOutput: ["v18.20.4"]
+    expectedOutput: ["v18.20.5"]
diff --git a/private/extensions/node.bzl b/private/extensions/node.bzl
index af030fbc5..df5607928 100644
--- a/private/extensions/node.bzl
+++ b/private/extensions/node.bzl
@@ -99,50 +99,50 @@ def _node_impl(module_ctx):
 
     node_archive(
         name = "nodejs18_amd64",
-        sha256 = "c4b0827dc47609d0a8379e6de6c74b3934da0b1312c733b5ebdcac16e3f1e954",
-        strip_prefix = "node-v18.20.4-linux-x64/",
-        urls = ["https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-x64.tar.gz"],
-        version = "18.20.4",
+        sha256 = "e7b80346bb586790ac6b29aa25c96716fcdf6039a6929c2ed506cec09cebc3c0",
+        strip_prefix = "node-v18.20.5-linux-x64/",
+        urls = ["https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-x64.tar.gz"],
+        version = "18.20.5",
         architecture = "amd64",
         control = "//nodejs:control",
     )
 
     node_archive(
         name = "nodejs18_arm64",
-        sha256 = "f4e0b8b1a89e5d6529e517d57b42ac5cbab0562d86e88566d8e90578257e2b16",
-        strip_prefix = "node-v18.20.4-linux-arm64/",
-        urls = ["https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-arm64.tar.gz"],
-        version = "18.20.4",
+        sha256 = "759cfb9f76a1019daf65db9c2e5e43074ee660ec9b9ff3f31dcc4a88cca671e9",
+        strip_prefix = "node-v18.20.5-linux-arm64/",
+        urls = ["https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-arm64.tar.gz"],
+        version = "18.20.5",
         architecture = "arm64",
         control = "//nodejs:control",
     )
 
     node_archive(
         name = "nodejs18_arm",
-        sha256 = "ce311e7167c8cc0392753119dad55291842c2f4aa7a87a093144fc9338f35b61",
-        strip_prefix = "node-v18.20.4-linux-armv7l/",
-        urls = ["https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-armv7l.tar.gz"],
-        version = "18.20.4",
+        sha256 = "8d358452e4fcf34b0dcf51a441ec8cf192f8ff83bdd4488708dcab18e8007621",
+        strip_prefix = "node-v18.20.5-linux-armv7l/",
+        urls = ["https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-armv7l.tar.gz"],
+        version = "18.20.5",
         architecture = "arm",
         control = "//nodejs:control",
     )
 
     node_archive(
         name = "nodejs18_ppc64le",
-        sha256 = "2356de20cb33798690c90270b557e690c34cfd67525e32a0a6301a8176ce0bd8",
-        strip_prefix = "node-v18.20.4-linux-ppc64le/",
-        urls = ["https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-ppc64le.tar.gz"],
-        version = "18.20.4",
+        sha256 = "1f916c66f96d9265394e3145bfa92be918abbb45ac9711a441cce99d76618f4a",
+        strip_prefix = "node-v18.20.5-linux-ppc64le/",
+        urls = ["https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-ppc64le.tar.gz"],
+        version = "18.20.5",
         architecture = "ppc64le",
         control = "//nodejs:control",
     )
 
     node_archive(
         name = "nodejs18_s390x",
-        sha256 = "654ee94e5695f4c97dc1adc03cf833763ba62865fefb057af7258a20a87be51c",
-        strip_prefix = "node-v18.20.4-linux-s390x/",
-        urls = ["https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-s390x.tar.gz"],
-        version = "18.20.4",
+        sha256 = "e9ca8239a1256ff66ecd156bf42e88eaad7a1276c421c1c5fd0d6936dcc59300",
+        strip_prefix = "node-v18.20.5-linux-s390x/",
+        urls = ["https://nodejs.org/dist/v18.20.5/node-v18.20.5-linux-s390x.tar.gz"],
+        version = "18.20.5",
         architecture = "s390x",
         control = "//nodejs:control",
     )