diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 636eb0f..41b5df6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -76,7 +76,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Build container image without publishing
-        uses: docker/build-push-action@502612d46437e573ecd598d11dd0b009741ed5cd
+        uses: docker/build-push-action@83bfd93ab480705a7b99a2ed02765137f5ab55ba
         with:
           context: .
           push: false
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index 64dedf0..2d0c97a 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Extract image metadata
         id: meta
-        uses: docker/metadata-action@12e32e61d3439d838b9b6d3fda7d2f6a422f893d
+        uses: docker/metadata-action@c3b064c6d7c32446d6bc214ea075f1caad2de35a
         with:
           images: ${{ steps.vars.outputs.image_name }}
           tags: |
@@ -51,14 +51,14 @@ jobs:
 
       - name: Log in to GitHub Container Registry
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@bb9683dca29f758cbd6ee832740e9f2dbeb21a3e
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and optionally publish image
-        uses: docker/build-push-action@502612d46437e573ecd598d11dd0b009741ed5cd
+        uses: docker/build-push-action@83bfd93ab480705a7b99a2ed02765137f5ab55ba
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}