diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 222e97c3..946ad8ef 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -83,7 +83,7 @@ jobs:
           severity-cutoff: critical
 
       - name: upload Anchore scan report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}
 
diff --git a/Dockerfile b/Dockerfile
index fd4adf06..c95dab9f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,8 @@ ARG BUN_VERSION="1.3.5"
 
 FROM oven/bun:${BUN_VERSION}-alpine AS base
 
-RUN apk add --no-cache davfs2=1.6.1-r2 openssh-client fuse3
+RUN apk upgrade --no-cache && \
+    apk add --no-cache davfs2=1.6.1-r2 openssh-client fuse3
 
 
 # ------------------------------