diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml
index cbcff77..a839704 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -52,6 +52,15 @@ jobs:
       - name: Run 3-node smoke test
         run: DLMDB_SKIP_BUILD=1 ./compose/smoke-test.sh
 
+      # Must run before the Scout scan below — docker scout cves calls
+      # Docker's backend to resolve vulnerability data even for local
+      # images, and fails (exit 125) on a fresh runner with no session.
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
+
       - name: Scan for Medium+ CVEs (fail release if found)
         shell: bash
         run: |
@@ -68,12 +77,6 @@ jobs:
           fi
           echo "PASS"
 
-      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}
-
       - name: Push tested image by digest
         id: push
         shell: bash
@@ -147,6 +150,7 @@ jobs:
         env:
           IMAGE: ${{ env.IMAGE }}
         run: |
+          # shellcheck disable=SC2046  # intentional word-splitting
           docker buildx imagetools create \
             -t "docker.io/${IMAGE}:${STRIPPED_VERSION}" \
             -t "docker.io/${IMAGE}:latest" \
diff --git a/Cargo.lock b/Cargo.lock
index 50a1bfe..f0deed8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -449,7 +449,7 @@ dependencies = [
 [[package]]
 name = "d-engine"
 version = "0.2.4"
-source = "git+https://github.com/DEventLab/d-engine?branch=fix%2F425-leader-hint#4a192e114b3833c805ac6e301739c9b1a81e9818"
+source = "git+https://github.com/DEventLab/d-engine?branch=main#ed9649cae618897c758a7e080a2d3e99afa3a5d6"
 dependencies = [
  "d-engine-server",
 ]
@@ -457,7 +457,7 @@ dependencies = [
 [[package]]
 name = "d-engine-core"
 version = "0.2.4"
-source = "git+https://github.com/DEventLab/d-engine?branch=fix%2F425-leader-hint#4a192e114b3833c805ac6e301739c9b1a81e9818"
+source = "git+https://github.com/DEventLab/d-engine?branch=main#ed9649cae618897c758a7e080a2d3e99afa3a5d6"
 dependencies = [
  "astral-tokio-tar",
  "async-compression",
@@ -494,7 +494,7 @@ dependencies = [
 [[package]]
 name = "d-engine-proto"
 version = "0.2.4"
-source = "git+https://github.com/DEventLab/d-engine?branch=fix%2F425-leader-hint#4a192e114b3833c805ac6e301739c9b1a81e9818"
+source = "git+https://github.com/DEventLab/d-engine?branch=main#ed9649cae618897c758a7e080a2d3e99afa3a5d6"
 dependencies = [
  "bytes",
  "prost",
@@ -508,7 +508,7 @@ dependencies = [
 [[package]]
 name = "d-engine-server"
 version = "0.2.4"
-source = "git+https://github.com/DEventLab/d-engine?branch=fix%2F425-leader-hint#4a192e114b3833c805ac6e301739c9b1a81e9818"
+source = "git+https://github.com/DEventLab/d-engine?branch=main#ed9649cae618897c758a7e080a2d3e99afa3a5d6"
 dependencies = [
  "arc-swap",
  "async-trait",
diff --git a/README.md b/README.md
index ab6df27..a26ef4d 100644
--- a/README.md
+++ b/README.md
@@ -3,6 +3,7 @@
 ![status](https://img.shields.io/badge/status-experimental-orange)
 [![CI](https://github.com/deventlab/d-lmdb/actions/workflows/ci.yml/badge.svg)](https://github.com/deventlab/d-lmdb/actions/workflows/ci.yml)
 [![codecov](https://codecov.io/gh/deventlab/d-lmdb/graph/badge.svg)](https://codecov.io/gh/deventlab/d-lmdb)
+[![Docker Pulls](https://img.shields.io/docker/pulls/deventlab/d-lmdb)](https://hub.docker.com/r/deventlab/d-lmdb)
 ![Static Badge](https://img.shields.io/badge/license-MIT%20%7C%20Apache--2.0-blue)
 [![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/deventlab/d-lmdb)
 
diff --git a/d-lmdb/Cargo.toml b/d-lmdb/Cargo.toml
index 81f792f..46496e2 100644
--- a/d-lmdb/Cargo.toml
+++ b/d-lmdb/Cargo.toml
@@ -11,7 +11,7 @@ rust-version = "1.89"
 
 [dependencies]
 # production: d-engine = "0.2"
-d-engine = { git = "https://github.com/DEventLab/d-engine", branch = "fix/425-leader-hint", default-features = false, features = ["server"] }
+d-engine = { git = "https://github.com/DEventLab/d-engine", branch = "main", default-features = false, features = ["server"] }
 
 heed = "0.20"
 bytes = "1"
@@ -29,7 +29,7 @@ anyhow = "1"
 tempfile = "3"
 tokio = { version = "1", features = ["rt-multi-thread", "macros", "test-util"] }
 tracing-subscriber = "0.3"
-d-engine = { git = "https://github.com/DEventLab/d-engine", branch = "fix/425-leader-hint", default-features = false, features = ["server", "__test_support"] }
+d-engine = { git = "https://github.com/DEventLab/d-engine", branch = "main", default-features = false, features = ["server", "__test_support"] }
 
 [[example]]
 name = "single_node"