diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index fce74c0..2bf2957 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,17 +25,17 @@ jobs:
 
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Set up QEMU for Docker Buildx
-        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
 
       - name: Set up Node.js for extracting recipe from Dockerfile
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: 20
           check-latest: true
@@ -62,7 +62,7 @@ jobs:
           echo "::set-output name=variant::$VARIANT"
 
       - name: Generate Docker image metadata
-        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+        uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5.6.1
         id: meta
         with:
           images: |
@@ -72,7 +72,7 @@ jobs:
 
       - name: Login to GitHub Container Registry
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -80,7 +80,7 @@ jobs:
 
       - name: Build and push the Docker image from the specified Dockerfile
         id: docker_build
-        uses: docker/build-push-action@a254f8ca60a858f3136a2f1f23a60969f2c402dd # v6.4.0
+        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
         with:
           context: ${{ env.ROOTDIR }}
           file: ${{ env.WORKDIR }}/Dockerfile
diff --git a/mariadb/10.11/Dockerfile b/mariadb/10.11/Dockerfile
index 1ccc5b6..f16d998 100644
--- a/mariadb/10.11/Dockerfile
+++ b/mariadb/10.11/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: lts
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/ppc64le, linux/s390x
-FROM --platform=$BUILDPLATFORM mariadb:10.11.8
+FROM --platform=$BUILDPLATFORM mariadb:10.11.10
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/mongo/5/Dockerfile b/mongo/5/Dockerfile
index 1e4d15d..a661211 100644
--- a/mongo/5/Dockerfile
+++ b/mongo/5/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS:
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8
-FROM --platform=$BUILDPLATFORM mongo:5.0.26
+FROM --platform=$BUILDPLATFORM mongo:5.0.30
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/mongo/6/Dockerfile b/mongo/6/Dockerfile
index 054a142..edf7d79 100644
--- a/mongo/6/Dockerfile
+++ b/mongo/6/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: latest
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8
-FROM --platform=$BUILDPLATFORM mongo:6.0.15
+FROM --platform=$BUILDPLATFORM mongo:6.0.19
 
 ENV DEBIAN_FRONTEND noninteractive
 
diff --git a/node/18/alpine/Dockerfile b/node/18/alpine/Dockerfile
index 181b402..ab8a384 100644
--- a/node/18/alpine/Dockerfile
+++ b/node/18/alpine/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT: alpine
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/arm/v6, linux/ppc64le, linux/s390x
-FROM node:18.20.3-alpine
+FROM node:18.20.5-alpine
 
 ARG BUILDPLATFORM
 
diff --git a/node/18/debian/Dockerfile b/node/18/debian/Dockerfile
index dc05c1c..cf43594 100644
--- a/node/18/debian/Dockerfile
+++ b/node/18/debian/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/ppc64le, linux/s390x
-FROM node:18.20.3-bullseye-slim
+FROM node:18.20.5-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/18/puppeteer/Dockerfile b/node/18/puppeteer/Dockerfile
index 5326cad..c1edf8c 100644
--- a/node/18/puppeteer/Dockerfile
+++ b/node/18/puppeteer/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: hydrogen
 # VARIANT:
 # PLATFORMS: linux/amd64
-FROM node:18.20.3-bullseye-slim
+FROM node:18.20.5-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/alpine/Dockerfile b/node/20/alpine/Dockerfile
index 89946c9..6a167ed 100644
--- a/node/20/alpine/Dockerfile
+++ b/node/20/alpine/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT: alpine
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/arm/v6, linux/ppc64le, linux/s390x
-FROM node:20.14.0-alpine
+FROM node:20.18.1-alpine
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/debian/Dockerfile b/node/20/debian/Dockerfile
index 29337ae..d49f648 100644
--- a/node/20/debian/Dockerfile
+++ b/node/20/debian/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT:
 # PLATFORMS: linux/amd64, linux/arm64/v8, linux/arm/v7, linux/ppc64le, linux/s390x
-FROM node:20.14.0-bullseye-slim
+FROM node:20.18.1-bullseye-slim
 
 ARG BUILDPLATFORM
 
diff --git a/node/20/puppeteer/Dockerfile b/node/20/puppeteer/Dockerfile
index 0287f88..1e5e605 100644
--- a/node/20/puppeteer/Dockerfile
+++ b/node/20/puppeteer/Dockerfile
@@ -1,7 +1,7 @@
 # TAGS: iron, lts
 # VARIANT:
 # PLATFORMS: linux/amd64
-FROM node:20.14.0-bullseye-slim
+FROM node:20.18.1-bullseye-slim
 
 ARG BUILDPLATFORM