diff --git a/playbooks/zuul/gerrit/repos.yaml b/playbooks/zuul/gerrit/repos.yaml
index 07ac521bd3..821aea44f7 100644
--- a/playbooks/zuul/gerrit/repos.yaml
+++ b/playbooks/zuul/gerrit/repos.yaml
@@ -3,7 +3,7 @@
     - role: ensure-java
       java_version: 11
     - role: ensure-nodejs
-      node_version: 10
+      node_version: 18
     - ensure-bazelisk
   tasks:
     - name: Install essential build packages
diff --git a/playbooks/zuul/gerrit/submodules.yaml b/playbooks/zuul/gerrit/submodules.yaml
index 8837275f06..155bf145e5 100644
--- a/playbooks/zuul/gerrit/submodules.yaml
+++ b/playbooks/zuul/gerrit/submodules.yaml
@@ -1,8 +1,8 @@
 - hosts: all
   tasks:
-
+    # https://github.blog/2022-10-18-git-security-vulnerabilities-announced/
     - name: Checkout submodules
-      shell: "if [ -d {{ item }} ] ; then git submodule update --init {{ item }} ; fi"
+      shell: "if [ -d {{ item }} ] ; then git -c protocol.file.allow=always submodule update --init {{ item }} ; fi"
       args:
         chdir: /home/zuul/src/gerrit.googlesource.com/gerrit
       loop: