diff --git a/.github/workflows/publish-agent-helper.yml b/.github/workflows/publish-agent-helper.yml
index 173648cc1..714023536 100644
--- a/.github/workflows/publish-agent-helper.yml
+++ b/.github/workflows/publish-agent-helper.yml
@@ -53,7 +53,7 @@ jobs:
       # Publish on push to main / manual dispatch; pull_request runs build-only.
       - name: log in to ghcr
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
+        uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4.5.2
         with:
           registry: ghcr.io
           username: ${{ github.actor }}