diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 40385b025..3a38a5173 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: docker/setup-qemu-action@v4
       - uses: docker/setup-buildx-action@v4
-      - uses: docker/login-action@v4
+      - uses: docker/login-action@v4.5.2
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a198cd669..817e2b7e5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -62,6 +62,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bump codecov/codecov-action from 6 to 7 ([#1087](https://github.com/alpha-unito/streamflow/pull/1087))
 - Bump codespell from 2.4.2 to 2.4.3 ([#1114](https://github.com/alpha-unito/streamflow/pull/1114))
 - Bump cwltest from 2.6.20251216093331 to 2.7.20260814150058 ([#1135](https://github.com/alpha-unito/streamflow/pull/1135))
+- Bump docker/login-action from 4 to 4.5.2 ([#1124](https://github.com/alpha-unito/streamflow/pull/1124))
 - Bump mypy from 1.20.2 to 2.3.1 ([#1059](https://github.com/alpha-unito/streamflow/pull/1059), [#1065](https://github.com/alpha-unito/streamflow/pull/1065), [#1108](https://github.com/alpha-unito/streamflow/pull/1108), [#1111](https://github.com/alpha-unito/streamflow/pull/1111), [#1133](https://github.com/alpha-unito/streamflow/pull/1133))
 - Bump pytest from 9.0.3 to 9.1.1 ([#1095](https://github.com/alpha-unito/streamflow/pull/1095), [#1098](https://github.com/alpha-unito/streamflow/pull/1098))
 - Bump pytest-asyncio from 1.3.0 to 1.4.0 ([#1076](https://github.com/alpha-unito/streamflow/pull/1076))