diff --git a/.github/workflows/release-latest.yml b/.github/workflows/release-latest.yml
index 82549f48..3996af9b 100644
--- a/.github/workflows/release-latest.yml
+++ b/.github/workflows/release-latest.yml
@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v4
diff --git a/.github/workflows/test-build-latest.yml b/.github/workflows/test-build-latest.yml
index 8afd65d8..97f22134 100644
--- a/.github/workflows/test-build-latest.yml
+++ b/.github/workflows/test-build-latest.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v4
diff --git a/nginx/Dockerfile b/nginx/Dockerfile
index bea05c65..2b7fbe54 100644
--- a/nginx/Dockerfile
+++ b/nginx/Dockerfile
@@ -1,5 +1,5 @@
 # --- sources stage
-FROM ghcr.io/nginx/nginx-unprivileged:1.31.2-trixie AS sources
+FROM ghcr.io/nginx/nginx-unprivileged:1.31.8-trixie AS sources
 
 ARG CORE_TAG
 ARG CORE_COMMIT
@@ -31,7 +31,7 @@ RUN <<-EOF
 EOF
 
 # --- final stage
-FROM ghcr.io/nginx/nginx-unprivileged:1.31.2-trixie
+FROM ghcr.io/nginx/nginx-unprivileged:1.31.8-trixie
 
 # environment
 ENV NGINX_INTERNAL_HTTP_PORT=8080