diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 746acef..7cfe162 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -54,7 +54,7 @@ jobs:
           echo "new_version=$new_version" >> $GITHUB_ENV
 
       - name: login to ghcr.io
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/Dockerfile.base b/Dockerfile.base
index e19fda3..37be210 100644
--- a/Dockerfile.base
+++ b/Dockerfile.base
@@ -1,4 +1,4 @@
-FROM --platform=$TARGETARCH ghcr.io/planetscale/ghcommit:v0.1.74 AS ghcommit
+FROM --platform=$TARGETARCH ghcr.io/planetscale/ghcommit:v0.1.75 AS ghcommit
 
 # hadolint ignore=DL3007
 FROM --platform=$TARGETARCH pscale.dev/wolfi-prod/base:latest AS base
diff --git a/docker-compose.yml b/docker-compose.yml
index d1895bc..12cab29 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,7 @@
 version: '2'
 services:
   lint:
-    image: koalaman/shellcheck-alpine:v0.10.0@sha256:5921d946dac740cbeec2fb1c898747b6105e585130cc7f0602eec9a10f7ddb63
+    image: koalaman/shellcheck-alpine:v0.11.0@sha256:9955be09ea7f0dbf7ae942ac1f2094355bb30d96fffba0ec09f5432207544002
     volumes:
       - ".:/plugin:ro"
     entrypoint: sh