diff --git a/.github/workflows/build-image-aurora.yml b/.github/workflows/build-image-aurora.yml
index a1bc0ed..9caa575 100644
--- a/.github/workflows/build-image-aurora.yml
+++ b/.github/workflows/build-image-aurora.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-bazzite-gnome.yml b/.github/workflows/build-image-bazzite-gnome.yml
index 6e4e708..3b5154d 100644
--- a/.github/workflows/build-image-bazzite-gnome.yml
+++ b/.github/workflows/build-image-bazzite-gnome.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-bazzite.yml b/.github/workflows/build-image-bazzite.yml
index 16af4fc..02513b7 100644
--- a/.github/workflows/build-image-bazzite.yml
+++ b/.github/workflows/build-image-bazzite.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-bluefin-dx.yml b/.github/workflows/build-image-bluefin-dx.yml
index 6c50f76..29df883 100644
--- a/.github/workflows/build-image-bluefin-dx.yml
+++ b/.github/workflows/build-image-bluefin-dx.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-bluefin.yml b/.github/workflows/build-image-bluefin.yml
index 0b990c5..99069da 100644
--- a/.github/workflows/build-image-bluefin.yml
+++ b/.github/workflows/build-image-bluefin.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-centos.yml b/.github/workflows/build-image-centos.yml
index d58ee95..28cfddc 100644
--- a/.github/workflows/build-image-centos.yml
+++ b/.github/workflows/build-image-centos.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-cosmic.yml b/.github/workflows/build-image-cosmic.yml
index 206c8c0..cf4c588 100644
--- a/.github/workflows/build-image-cosmic.yml
+++ b/.github/workflows/build-image-cosmic.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-kansei-falcon.yml b/.github/workflows/build-image-kansei-falcon.yml
index 7487a8a..20551e4 100644
--- a/.github/workflows/build-image-kansei-falcon.yml
+++ b/.github/workflows/build-image-kansei-falcon.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-kansei-test.yml b/.github/workflows/build-image-kansei-test.yml
index 07b3819..d94b685 100644
--- a/.github/workflows/build-image-kansei-test.yml
+++ b/.github/workflows/build-image-kansei-test.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-kansei.yml b/.github/workflows/build-image-kansei.yml
index a688ad4..6557939 100644
--- a/.github/workflows/build-image-kansei.yml
+++ b/.github/workflows/build-image-kansei.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build-image-silverblue.yml b/.github/workflows/build-image-silverblue.yml
index 37a086a..b98df72 100644
--- a/.github/workflows/build-image-silverblue.yml
+++ b/.github/workflows/build-image-silverblue.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 479024c..69f3fac 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -137,7 +137,7 @@ jobs:
       # These `if` statements are so that pull requests for your custom images do not make it publish any packages under your name without you knowing
       # They also check if the runner is on the default branch so that things like the merge queue (if you enable it), are going to work
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         if: github.event_name != 'pull_request' && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
         with:
           registry: ghcr.io