diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cc9d36e..e62cedb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,14 +19,14 @@ jobs:
       id-token: write
     steps:
       - uses: actions/checkout@v4
-      - uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
+      - uses: docker/login-action@v6
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@a64d0487d7069df33b279515d35d60fa80e2ea62
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
       - uses: actions/setup-java@v4
@@ -46,7 +46,7 @@ jobs:
             -Dquarkus.native.container-build=true -Dquarkus.native.additional-build-args=--initialize-at-run-time=org.hibernate.type.format.jakartajson.JakartaJsonIntegration\\,ch.postfinance.swiss.hacks.domain.Account\\,ch.postfinance.swiss.hacks.service.LoginService
       - name: Build and push Docker image
         id: push
-        uses: docker/build-push-action@15560696de535e4014efeff63c48f16952e52dd1
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./src/main/docker/Dockerfile.distroless