diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 5b63537..d1ffe7b 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -14,6 +14,6 @@ jobs:
       - name: 'Checkout repository'
         uses: actions/checkout@v7
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@v5
         with:
           comment-summary-in-pr: on-failure
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3bb9817..ccb93f1 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -3,6 +3,11 @@ on:
   workflow_dispatch: null
   release:
     types: [ published ]
+
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   oci_publish:
     name: Build and publish the docker plugin
@@ -17,16 +22,23 @@ jobs:
           python-version: '3.x'
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
 
+      - name: OIDC connections
+        id: docker_oidc
+        uses: docker/oidc-action@v1
+        with:
+          connection-id: ${{ vars.DOCKER_OIDC_CONNECTION_ID }}
+          expires-in: 1800
+
       - name: Login to Docker Hub
         uses: docker/login-action@v4
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          username: ${{ vars.DOCKERHUB_ORGANIZATION }}
+          password: ${{ steps.docker_oidc.outputs.token }}
 
       - name: Build and push to DockerHub
         run: make deploy