diff --git a/.github/workflows/bake.yml b/.github/workflows/bake.yml
index bb87fd0..18063d0 100644
--- a/.github/workflows/bake.yml
+++ b/.github/workflows/bake.yml
@@ -66,7 +66,7 @@ jobs:
           } >> "$GITHUB_ENV"
 
       - name: Check for changes
-        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
+        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
         id: filter
         with:
           filters: |
diff --git a/.github/workflows/bake_targets.yml b/.github/workflows/bake_targets.yml
index e620cb4..006d300 100644
--- a/.github/workflows/bake_targets.yml
+++ b/.github/workflows/bake_targets.yml
@@ -32,7 +32,7 @@ jobs:
           persist-credentials: false
 
       - name: Log in to the GitHub Container registry
-        uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/update_os_libraries.yml b/.github/workflows/update_os_libraries.yml
index 2b6d5c8..da3b5ab 100644
--- a/.github/workflows/update_os_libraries.yml
+++ b/.github/workflows/update_os_libraries.yml
@@ -56,7 +56,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Log in to the GitHub Container registry
-        uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}