diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fce74c0..46be73c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,17 +25,17 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
 
       - name: Set up QEMU for Docker Buildx
-        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
+        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
 
       - name: Set up Node.js for extracting recipe from Dockerfile
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: 20
           check-latest: true
@@ -72,7 +72,7 @@ jobs:
 
       - name: Login to GitHub Container Registry
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -80,7 +80,7 @@ jobs:
 
       - name: Build and push the Docker image from the specified Dockerfile
         id: docker_build
-        uses: docker/build-push-action@a254f8ca60a858f3136a2f1f23a60969f2c402dd # v6.4.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           context: ${{ env.ROOTDIR }}
           file: ${{ env.WORKDIR }}/Dockerfile
diff --git a/mariadb/10.11/Dockerfile b/mariadb/10.11/Dockerfile
index 1ccc5b6..66e7377 100644
--- a/mariadb/10.11/Dockerfile
+++ b/mariadb/10.11/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: lts
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/ppc64le, linux/s390x
-FROM --platform=$BUILDPLATFORM mariadb:10.11.8
+FROM --platform=$BUILDPLATFORM mariadb:10.11.9
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/mongo/5/Dockerfile b/mongo/5/Dockerfile
index 1e4d15d..8d3b999 100644
--- a/mongo/5/Dockerfile
+++ b/mongo/5/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS:
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8
-FROM --platform=$BUILDPLATFORM mongo:5.0.26
+FROM --platform=$BUILDPLATFORM mongo:5.0.28
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/mongo/6/Dockerfile b/mongo/6/Dockerfile
index 054a142..b827bf4 100644
--- a/mongo/6/Dockerfile
+++ b/mongo/6/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: latest
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8
-FROM --platform=$BUILDPLATFORM mongo:6.0.15
+FROM --platform=$BUILDPLATFORM mongo:6.0.17
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/node/18/alpine/Dockerfile b/node/18/alpine/Dockerfile
index 181b402..990a872 100644
--- a/node/18/alpine/Dockerfile
+++ b/node/18/alpine/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT: alpine
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/arm/v6, linux/ppc64le, linux/s390x
-FROM node:18.20.3-alpine
+FROM node:18.20.4-alpine
 
 ARG BUILDPLATFORM
 
diff --git a/node/18/debian/Dockerfile b/node/18/debian/Dockerfile
index dc05c1c..0bb3e73 100644
--- a/node/18/debian/Dockerfile
+++ b/node/18/debian/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/ppc64le, linux/s390x
-FROM node:18.20.3-bullseye-slim
+FROM node:18.20.4-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/18/puppeteer/Dockerfile b/node/18/puppeteer/Dockerfile
index 5326cad..8ab52a1 100644
--- a/node/18/puppeteer/Dockerfile
+++ b/node/18/puppeteer/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT:
 # PLATFORMS: linux/amd64
-FROM node:18.20.3-bullseye-slim
+FROM node:18.20.4-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/alpine/Dockerfile b/node/20/alpine/Dockerfile
index 89946c9..aa09ada 100644
--- a/node/20/alpine/Dockerfile
+++ b/node/20/alpine/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT: alpine
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/arm/v6, linux/ppc64le, linux/s390x
-FROM node:20.14.0-alpine
+FROM node:20.17.0-alpine
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/debian/Dockerfile b/node/20/debian/Dockerfile
index 29337ae..4dd8d57 100644
--- a/node/20/debian/Dockerfile
+++ b/node/20/debian/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/ppc64le, linux/s390x
-FROM node:20.14.0-bullseye-slim
+FROM node:20.17.0-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/puppeteer/Dockerfile b/node/20/puppeteer/Dockerfile
index 0287f88..54716a5 100644
--- a/node/20/puppeteer/Dockerfile
+++ b/node/20/puppeteer/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT:
 # PLATFORMS: linux/amd64
-FROM node:20.14.0-bullseye-slim
+FROM node:20.17.0-bullseye-slim
 
 ARG BUILDPLATFORM