diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f4137825..692ee267 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -59,7 +59,7 @@ jobs:
             --store-password-in-clear-text
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.38.0
+        uses: github/codeql-action/init@v4.38.1
         with:
           languages: csharp
           # Trace exactly the `dotnet build` step below. Without build-mode the
@@ -73,6 +73,6 @@ jobs:
         run: dotnet build Verbara.Platform.slnx -c Release --no-incremental
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v4.38.0
+        uses: github/codeql-action/analyze@v4.38.1
         with:
           category: "/language:csharp"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 515579af..5d8a7bc6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -115,7 +115,7 @@ jobs:
 
       - name: Set up Docker Buildx
         if: steps.retro.outputs.skip != 'true'
-        uses: docker/setup-buildx-action@v4.3.0
+        uses: docker/setup-buildx-action@v4.4.1
 
       - name: Log in to GitHub Container Registry
         if: steps.retro.outputs.skip != 'true'
@@ -128,7 +128,7 @@ jobs:
       - name: Build and push final image
         if: steps.retro.outputs.skip != 'true'
         id: build
-        uses: docker/build-push-action@v7.3.0
+        uses: docker/build-push-action@v7.4.0
         with:
           context: .
           file: ${{ matrix.dockerfile }}