diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 3c88c525..6b739682 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -89,7 +89,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@607069025f6c1312680ed0864c4d9f4338b82dfe # 0.26.5
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@ed354ada70b9f518c2bb663e18a80041c2cf5156 # 0.27.1
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__test-action-docker-build-image.yml b/.github/workflows/__test-action-docker-build-image.yml
index b3adc495..f996edca 100644
--- a/.github/workflows/__test-action-docker-build-image.yml
+++ b/.github/workflows/__test-action-docker-build-image.yml
@@ -154,7 +154,7 @@ jobs:
               `"annotations.org.opencontainers.image.version" output is not valid`
             );
 
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -240,7 +240,7 @@ jobs:
               }
             }
 
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -338,7 +338,7 @@ jobs:
               `"digest" output is not valid`
             );
 
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -417,7 +417,7 @@ jobs:
               `"digest" output is not valid`
             );
 
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
diff --git a/actions/docker/build-image/action.yml b/actions/docker/build-image/action.yml
index bbe237ae..3e4a2001 100644
--- a/actions/docker/build-image/action.yml
+++ b/actions/docker/build-image/action.yml
@@ -339,14 +339,14 @@ runs:
           }
 
     - if: steps.get-docker-config.outputs.platform-exists != 'true'
-      uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+      uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
       with:
         platforms: ${{ inputs.platform }}
 
     # Caching setup
     - if: steps.get-docker-config.outputs.cache-disabled != 'true'
       id: cache-arguments
-      uses: int128/docker-build-cache-config-action@e7428bcd6851e35bd024e91ea18c0da8c0a098b4 # v1.60.0
+      uses: int128/docker-build-cache-config-action@6bc1706b2177387f35c9676a431df2e285466d9a # v1.61.0
       with:
         image: ${{ steps.get-docker-config.outputs.cache-image }}
         flavor: ${{ steps.get-docker-config.outputs.cache-flavor }}
@@ -391,7 +391,7 @@ runs:
           );
 
     - id: build
-      uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+      uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
       with:
         context: ${{ steps.get-docker-config.outputs.context-path }} # zizmor: ignore[template-injection]
         build-args: ${{ inputs.build-args }}
diff --git a/actions/docker/get-image-metadata/action.yml b/actions/docker/get-image-metadata/action.yml
index add044f6..f4f641c9 100644
--- a/actions/docker/get-image-metadata/action.yml
+++ b/actions/docker/get-image-metadata/action.yml
@@ -114,7 +114,7 @@ runs:
           core.setFailed(`No tags found for the current event: ${context.eventName}`);
 
     - id: docker-metadata
-      uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+      uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
       with:
         images: ${{ steps.image-name.outputs.image-name-with-registry }}
         tags: ${{ steps.define-metadata-inputs.outputs.tags }}
diff --git a/actions/docker/setup/action.yml b/actions/docker/setup/action.yml
index 6dbc55a7..379367a2 100644
--- a/actions/docker/setup/action.yml
+++ b/actions/docker/setup/action.yml
@@ -403,7 +403,7 @@ runs:
           core.setOutput('exists', dockerPath ? 'true' : 'false');
 
     - if: steps.detect-docker.outputs.exists != 'true'
-      uses: docker/setup-docker-action@0234bb73ccb40f0c430b795634f9247e2b5c2d23 # v5.2.0
+      uses: docker/setup-docker-action@6d7cfa65f60a9dda7b46e5513fa982536f3c9877 # v5.3.0
 
     - if: inputs.setup-buildx != 'false'
       uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -442,7 +442,7 @@ runs:
           }
 
     - if: inputs.setup-buildx != 'false'
-      uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+      uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       id: setup-buildx
       with:
         version: ${{ inputs.buildx-version }}
@@ -452,6 +452,6 @@ runs:
         cleanup: ${{ inputs.buildx-cleanup }}
 
     - if: steps.resolve-oci-registries.outputs.has-registry-auth == 'true'
-      uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+      uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
       with:
         registry-auth: ${{ steps.resolve-oci-registries.outputs.registry-auth }}