diff --git a/.github/workflows/buildroot-e2e.yml b/.github/workflows/buildroot-e2e.yml
index 7b6c09845a..7e0df7de12 100644
--- a/.github/workflows/buildroot-e2e.yml
+++ b/.github/workflows/buildroot-e2e.yml
@@ -21,10 +21,10 @@ jobs:
     # Steps represent a sequence of tasks
     steps:
       # Checks-out the repo under $GITHUB_WORKSPACE
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Cache build cache and downloads
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         env:
           cache-name: cache-buildroot
         with:
diff --git a/.github/workflows/repo-lockdown.yml b/.github/workflows/repo-lockdown.yml
index 45cfd2867d..461e588fcb 100644
--- a/.github/workflows/repo-lockdown.yml
+++ b/.github/workflows/repo-lockdown.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'buildroot/buildroot'
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/repo-lockdown@v4
+      - uses: dessant/repo-lockdown@v5
         with:
           pr-comment: |
             Please do not submit a Pull Request via GitHub. Buildroot makes use of a
diff --git a/support/docker/Dockerfile b/support/docker/Dockerfile
index e7677ac6a9..fa8bed3add 100644
--- a/support/docker/Dockerfile
+++ b/support/docker/Dockerfile
@@ -8,7 +8,7 @@
 # We use a specific tag for the base image *and* the corresponding date
 # for the repository., so do not forget to update the apt-sources.list
 # file that is shipped next to this Dockerfile.
-FROM debian:bookworm-20250203
+FROM debian:trixie-20260518
 
 LABEL maintainer="Buildroot mailing list <buildroot@buildroot.org>" \
       vendor="Buildroot" \