diff --git a/.github/workflows/binary_provenance.yml b/.github/workflows/binary_provenance.yml
index 637828d64..4ed384ea2 100644
--- a/.github/workflows/binary_provenance.yml
+++ b/.github/workflows/binary_provenance.yml
@@ -59,7 +59,7 @@ jobs:
 
         - name: Attest Build Provenance
           id: artifact-gh-attest
-          uses: actions/attest@v4.2.0
+          uses: actions/attest@v4.2.1
           with:
             subject-name: ${{matrix.artifact.template_name}}
             subject-digest: sha256:${{ env.FINGERPRINT }}
@@ -94,7 +94,7 @@ jobs:
 
         - name: Attest SBOM to Github
           id: sbom-gh-attest
-          uses: actions/attest@v4.2.0
+          uses: actions/attest@v4.2.1
           with:
             sbom-path: '${{matrix.artifact.template_name}}-sbom.spdx.json'
             subject-name: ${{matrix.artifact.template_name}}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index bc76640fd..ca61be532 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -134,7 +134,7 @@ jobs:
         # No QEMU needed — each runner is already native for its platform
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4.5.2
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -212,7 +212,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4.5.2
+        uses: docker/login-action@v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -258,7 +258,7 @@ jobs:
           echo "FINGERPRINT=$ARTIFACT_SHA" >> ${GITHUB_ENV}
 
       - name: Attest Build Provenance
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.1
         with:
           subject-name: ${{ env.IMAGE }}
           subject-digest: ${{ steps.docker_build.outputs.digest }}
@@ -273,7 +273,7 @@ jobs:
           upload-artifact: false
 
       - name: Attest SBOM to Github
-        uses: actions/attest@v4.2.0
+        uses: actions/attest@v4.2.1
         with:
           sbom-path: 'sbom.spdx.json'
           subject-name: ${{ env.IMAGE }}