diff --git a/.github/workflows/alpine-mainline.yml b/.github/workflows/alpine-mainline.yml
index 7f01ac2..6adc9b8 100644
--- a/.github/workflows/alpine-mainline.yml
+++ b/.github/workflows/alpine-mainline.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -203,7 +203,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -321,7 +321,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -439,7 +439,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
diff --git a/.github/workflows/alpine-stable.yml b/.github/workflows/alpine-stable.yml
index 1054a0d..85e2aa0 100644
--- a/.github/workflows/alpine-stable.yml
+++ b/.github/workflows/alpine-stable.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -195,7 +195,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -305,7 +305,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -414,7 +414,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
diff --git a/.github/workflows/debian-mainline.yml b/.github/workflows/debian-mainline.yml
index df41032..fa73b20 100644
--- a/.github/workflows/debian-mainline.yml
+++ b/.github/workflows/debian-mainline.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -204,7 +204,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -323,7 +323,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
diff --git a/.github/workflows/debian-stable.yml b/.github/workflows/debian-stable.yml
index 5690c8b..968859f 100644
--- a/.github/workflows/debian-stable.yml
+++ b/.github/workflows/debian-stable.yml
@@ -85,7 +85,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -196,7 +196,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged
@@ -307,7 +307,7 @@ jobs:
 
       - name: Extract metadata (annotations, labels, tags) for Docker
         id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           images: |
             docker.io/nginxinc/nginx-unprivileged