diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d42a85f7..44c6ba17 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -134,7 +134,7 @@ jobs:
           merge-multiple: true
       - name: Cache Dive
         id: cache-dive
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/dive_${{ env.DIVE_VER }}_linux_amd64.deb
           key: ${{ runner.os }}-dive-${{ env.DIVE_VER }}
@@ -175,7 +175,7 @@ jobs:
             docker load --input images/${image}
           done
       - name: Cache Docker images
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         id: docker-images-cache
         with:
           path: /tmp/docker-images
@@ -239,7 +239,7 @@ jobs:
           cluster_name: ${{ env.CLUSTER_NAME }}
       - name: Cache Popeye
         id: cache-popeye
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/popeye_linux_amd64.deb
           key: ${{ runner.os }}-popeye-${{ env.POPEYE_VER }}
@@ -255,7 +255,7 @@ jobs:
           kind get clusters
           kubectl config use-context kind-${{ env.CLUSTER_NAME }}
       - name: Cache Docker images
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         id: docker-images-cache
         with:
           path: /tmp/docker-images
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 87e48b37..8a262dd4 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
           python-version: "3.14"
           cache: "pip"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6f2cc020..a27cde7b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
           skip-commit: true
           skip-tag: true
           output-file: "false"
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         if: ${{ steps.changelog.outputs.skipped == 'false' }}
         with:
           python-version: "3.14"
diff --git a/target/filter/Dockerfile b/target/filter/Dockerfile
index 80a1425c..a663ff5f 100644
--- a/target/filter/Dockerfile
+++ b/target/filter/Dockerfile
@@ -1,4 +1,4 @@
-FROM rspamd/rspamd:4.1@sha256:7f69a2167c552cd5a21237b8395bb20a097d115feda62f2d1cda61258d9db497
+FROM rspamd/rspamd:4.1@sha256:4af2dd24a737688282f297a9492002fd01b9f6c844b0df127f44ddc174ed0f6d
 
 LABEL maintainer="https://github.com/jeboehm/docker-mailserver"
 LABEL vendor="https://github.com/jeboehm/docker-mailserver"