diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5488c3ea..bb1680aa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## 3.82.0
+
+- Upgrade Node.js in the `pulumi/pulumi` image and `pulumi/nodejs` UBI image to the Active LTS version 18
+  ([#150](https://github.com/pulumi/pulumi-docker-containers/pull/150))
+
 ## 3.63.0
 
 - Upgrade Go to 1.20.3. ([#134](https://github.com/pulumi/pulumi-docker-containers/pull/134))
diff --git a/README.md b/README.md
index 5a6071e6..48c719a5 100644
--- a/README.md
+++ b/README.md
@@ -37,9 +37,13 @@ Images are pushed to:
 - .NET 6.0
 - Go 1.20
 - JDK 11
-- Node.js 16
+- Node.js 18
 - Python 3.9
 
+### Version Policy
+
+Language runtimes are kept up-to-date with current LTS versions. You can pin the image tag to a particular version in order to avoid unintended upgrades.
+
 ## Scanning
 
 Images are scanned nightly for vulnerabilities.  Results are checked periodically for issues that can be remediated (best effort), however there are some issues over which we have no control, e.g. vulnerabilities in base images for which there is no known remediation.
@@ -58,6 +62,6 @@ The base and SDK images _do not_ include additional tools you might want to use
 
 ## Release Cadence
 
-The images in this repository are released automatically as part of the release process for the `pulumi` CLI. You can expect **new minor releases** roughly every other week, with patch releases more frequently as necessary.
+The images in this repository are released automatically as part of the release process for the `pulumi` CLI. You can expect **new minor releases** roughly every week, with patch releases more frequently as necessary.
 
 The image tags for each image in this repository mirror the git tags on the `pulumi` CLI. Thus, when [`pulumi v3.35.1`](https://github.com/pulumi/pulumi/releases) is released, you will find a corresponding Docker image [`pulumi/pulumi:3.35.1`](https://hub.docker.com/r/pulumi/pulumi) in DockerHub, ECR, and GHCR.
diff --git a/docker/nodejs/Dockerfile b/docker/nodejs/Dockerfile
index 25a7ec09..75b5ec4c 100644
--- a/docker/nodejs/Dockerfile
+++ b/docker/nodejs/Dockerfile
@@ -15,7 +15,7 @@ RUN curl -fsSL https://get.pulumi.com/ | bash -s -- --version $PULUMI_VERSION
 
 
 # The runtime container
-FROM node:lts-bullseye-slim
+FROM node:18-bullseye-slim
 LABEL org.opencontainers.image.description="Pulumi CLI container for nodejs"
 WORKDIR /pulumi/projects
 
diff --git a/docker/nodejs/dnf/nodejs.module b/docker/nodejs/dnf/nodejs.module
index fe67f378..3f3e2a3c 100644
--- a/docker/nodejs/dnf/nodejs.module
+++ b/docker/nodejs/dnf/nodejs.module
@@ -1,5 +1,5 @@
 [nodejs] 
 name=nodejs 
-stream=14
+stream=18
 profiles= 
 state=enabled
diff --git a/docker/pulumi/Dockerfile b/docker/pulumi/Dockerfile
index 61d5f217..0611b097 100644
--- a/docker/pulumi/Dockerfile
+++ b/docker/pulumi/Dockerfile
@@ -39,7 +39,7 @@ RUN apt-get update -y && \
   rm -rf aws && \
   rm awscliv2.zip && \
   # Add additional apt repos all at once
-  echo "deb https://deb.nodesource.com/node_16.x $(lsb_release -cs) main"                         | tee /etc/apt/sources.list.d/node.list             && \
+  echo "deb https://deb.nodesource.com/node_18.x $(lsb_release -cs) main"                         | tee /etc/apt/sources.list.d/node.list             && \
   echo "deb https://dl.yarnpkg.com/debian/ stable main"                                           | tee /etc/apt/sources.list.d/yarn.list             && \
   echo "deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable"      | tee /etc/apt/sources.list.d/docker.list           && \
   echo "deb http://packages.cloud.google.com/apt cloud-sdk-$(lsb_release -cs) main"               | tee /etc/apt/sources.list.d/google-cloud-sdk.list && \