diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index c46126b..d508fd0 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -299,7 +299,7 @@ jobs:
       # logout: false leaves the cached creds in place for downstream steps.
       - name: Login to ghcr.io
         if: steps.skip-gate.outputs.skipped == 'false'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
         continue-on-error: true
         with:
           registry: ghcr.io
@@ -309,7 +309,7 @@ jobs:
 
       - name: Login to docker.io
         if: steps.skip-gate.outputs.skipped == 'false'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
         continue-on-error: true
         with:
           username: ${{ steps.creds.outputs.DOCKERHUB_USERNAME }}
@@ -318,7 +318,7 @@ jobs:
 
       - name: Login to registry.gitlab.com
         if: steps.skip-gate.outputs.skipped == 'false'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
         continue-on-error: true
         with:
           registry: registry.gitlab.com
@@ -328,7 +328,7 @@ jobs:
 
       - name: Login to gitlab-container.zenterprise.org
         if: steps.skip-gate.outputs.skipped == 'false'
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee  # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0  # v4.4.0
         continue-on-error: true
         with:
           registry: gitlab-container.zenterprise.org