diff --git a/services/spelling/.github/dependabot.yml b/services/spelling/.github/dependabot.yml
index c6f98d843d..e2c64a3351 100644
--- a/services/spelling/.github/dependabot.yml
+++ b/services/spelling/.github/dependabot.yml
@@ -15,3 +15,9 @@ updates:
     # Block informal upgrades -- security upgrades use a separate queue.
     # https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#open-pull-requests-limit
     open-pull-requests-limit: 0
+
+    # currently assign team-magma to all dependabot PRs - this may change in
+    # future if we reorganise teams
+    labels:
+      - "dependencies"
+      - "Team-Magma"
diff --git a/services/spelling/.nvmrc b/services/spelling/.nvmrc
index b61c07ffdd..c2f6421352 100644
--- a/services/spelling/.nvmrc
+++ b/services/spelling/.nvmrc
@@ -1 +1 @@
-10.21.0
+10.22.1
diff --git a/services/spelling/Dockerfile b/services/spelling/Dockerfile
index e2db731889..3c93281f27 100644
--- a/services/spelling/Dockerfile
+++ b/services/spelling/Dockerfile
@@ -2,7 +2,7 @@
 # Instead run bin/update_build_scripts from
 # https://github.com/sharelatex/sharelatex-dev-environment
 
-FROM node:10.21.0 as base
+FROM node:10.22.1 as base
 
 WORKDIR /app
 COPY install_deps.sh /app
diff --git a/services/spelling/buildscript.txt b/services/spelling/buildscript.txt
index 418e5f34bc..fb25857eab 100644
--- a/services/spelling/buildscript.txt
+++ b/services/spelling/buildscript.txt
@@ -4,6 +4,6 @@ spelling
 --docker-repos=gcr.io/overleaf-ops
 --env-add=
 --env-pass-through=
---node-version=10.21.0
+--node-version=10.22.1
 --public-repo=False
---script-version=3.3.2
+--script-version=3.3.4