diff --git a/.github/workflows/build-actions-runner.yaml b/.github/workflows/build-actions-runner.yaml
index f99cfaff..9ca54b09 100644
--- a/.github/workflows/build-actions-runner.yaml
+++ b/.github/workflows/build-actions-runner.yaml
@@ -44,7 +44,7 @@ jobs:
           persist-credentials: false
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-mdq.yml b/.github/workflows/build-mdq.yml
index fe14d562..e4ddf957 100644
--- a/.github/workflows/build-mdq.yml
+++ b/.github/workflows/build-mdq.yml
@@ -45,7 +45,7 @@ jobs:
           persist-credentials: false
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: ${{ !github.event.pull_request.head.repo.fork }}
         with:
           registry: ghcr.io
diff --git a/.github/workflows/flux-diff.yml b/.github/workflows/flux-diff.yml
index bdafec59..18d0949a 100644
--- a/.github/workflows/flux-diff.yml
+++ b/.github/workflows/flux-diff.yml
@@ -31,7 +31,7 @@ jobs:
 
       - if: ${{ steps.diff.outputs.diff != '' }}
         name: Add comment
-        uses: mshick/add-pr-comment@ffd016c7e151d97d69d21a843022fd4cd5b96fe5 # v3.9.0
+        uses: mshick/add-pr-comment@64b8e914979889d746c99dea15a76e77ef64580a # v3.10.0
         with:
           message-id: "${{ github.event.pull_request.number }}/${{ matrix.path }}/${{ matrix.resource }}"
           message-failure: Diff was not successful
diff --git a/.github/workflows/multi-runner-build.yml b/.github/workflows/multi-runner-build.yml
index cc864ed4..01224cde 100644
--- a/.github/workflows/multi-runner-build.yml
+++ b/.github/workflows/multi-runner-build.yml
@@ -126,13 +126,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: ${{ inputs.dockerhub-push }}
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Login to GHCR
-        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
diff --git a/.github/workflows/shared-zizmor.yml b/.github/workflows/shared-zizmor.yml
index c74b186e..eee6004a 100644
--- a/.github/workflows/shared-zizmor.yml
+++ b/.github/workflows/shared-zizmor.yml
@@ -31,7 +31,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
         with:
           sarif_file: results.sarif
           category: zizmor
diff --git a/actions/image-build/action.yml b/actions/image-build/action.yml
index 29216fd0..a3a897c4 100644
--- a/actions/image-build/action.yml
+++ b/actions/image-build/action.yml
@@ -40,7 +40,7 @@ runs:
       uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
+      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       if: ${{ !github.event.pull_request.head.repo.fork }}
       with:
         registry: ghcr.io