diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 83b1ea3..b776af3 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -25,7 +25,7 @@ jobs:
       contents: read
       packages: write
       attestations: write
-    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@ae21ec822981e1ab9e48023ac3da57c964edad04 # v1.18.0
+    uses: datum-cloud/actions/.github/workflows/publish-docker.yaml@a4f8931a5accb27db097a68c06d67802a024a9c5 # v1.23.1
     with:
       image-name: backstage
       context: .
@@ -93,7 +93,7 @@ jobs:
       id-token: write
       contents: read
       packages: write
-    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@ae21ec822981e1ab9e48023ac3da57c964edad04 # v1.18.0
+    uses: datum-cloud/actions/.github/workflows/publish-kustomize-bundle.yaml@a4f8931a5accb27db097a68c06d67802a024a9c5 # v1.23.1
     with:
       bundle-name: ghcr.io/datum-cloud/backstage-kustomize
       bundle-path: config