diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 128c4a61f..9609ffbf9 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -746,7 +746,7 @@ jobs:
         run: node scripts/release-discord-summary.cjs --tag "v${RELEASE_VERSION}" --post --allow-missing-webhook
 
       - name: Log in to GHCR
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
index c0413ebc0..6c9aebfa7 100644
--- a/.github/workflows/pipeline.yml
+++ b/.github/workflows/pipeline.yml
@@ -50,7 +50,7 @@ jobs:
 
       - name: Log in to GHCR
         if: steps.check.outputs.changed == 'true'
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}