diff --git a/services/clsi/.github/dependabot.yml b/services/clsi/.github/dependabot.yml
index c6f98d843d..e2c64a3351 100644
--- a/services/clsi/.github/dependabot.yml
+++ b/services/clsi/.github/dependabot.yml
@@ -15,3 +15,9 @@ updates:
     # Block informal upgrades -- security upgrades use a separate queue.
     # https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#open-pull-requests-limit
     open-pull-requests-limit: 0
+
+    # currently assign team-magma to all dependabot PRs - this may change in
+    # future if we reorganise teams
+    labels:
+      - "dependencies"
+      - "Team-Magma"
diff --git a/services/clsi/.nvmrc b/services/clsi/.nvmrc
index b61c07ffdd..c2f6421352 100644
--- a/services/clsi/.nvmrc
+++ b/services/clsi/.nvmrc
@@ -1 +1 @@
-10.21.0
+10.22.1
diff --git a/services/clsi/Dockerfile b/services/clsi/Dockerfile
index bbf1efd072..5d702dce79 100644
--- a/services/clsi/Dockerfile
+++ b/services/clsi/Dockerfile
@@ -2,7 +2,7 @@
 # Instead run bin/update_build_scripts from
 # https://github.com/sharelatex/sharelatex-dev-environment
 
-FROM node:10.21.0 as base
+FROM node:10.22.1 as base
 
 WORKDIR /app
 COPY install_deps.sh /app
diff --git a/services/clsi/buildscript.txt b/services/clsi/buildscript.txt
index b2866578d9..0d61644133 100644
--- a/services/clsi/buildscript.txt
+++ b/services/clsi/buildscript.txt
@@ -4,6 +4,6 @@ clsi
 --docker-repos=gcr.io/overleaf-ops
 --env-add=
 --env-pass-through=TEXLIVE_IMAGE
---node-version=10.21.0
+--node-version=10.22.1
 --public-repo=True
---script-version=3.3.2
+--script-version=3.3.3