diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 547f328d..bdf9a568 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Lint commit messages
-        uses: wagoid/commitlint-github-action@ca212b3558faa549515a96944595cad58a40e047 # tag=v4.1.11
+        uses: wagoid/commitlint-github-action@d608cb14eff8344e2ecf456e89f03f5c172884b3 # tag=v4.1.12
         continue-on-error: true
 
   lint:
diff --git a/src/docker.ts b/src/docker.ts
index df4935f4..3e031021 100644
--- a/src/docker.ts
+++ b/src/docker.ts
@@ -1,7 +1,7 @@
 class Docker {
   readonly repository = 'renovate/renovate';
   // renovate: datasource=docker depName=renovate/renovate versioning=docker
-  readonly tag = '32.45.2-slim';
+  readonly tag = '32.45.4-slim';
   readonly tagSuffix = '-slim';
 
   image(): string {