diff --git a/.github/workflows/container-build.yml b/.github/workflows/container-build.yml
index 82619b0..02d2cb3 100644
--- a/.github/workflows/container-build.yml
+++ b/.github/workflows/container-build.yml
@@ -101,13 +101,13 @@ jobs:
         if: steps.skip_check.outputs.DO_NOT_BUILD != 'true'
       - name: Log in to the Github Container registry
         if: steps.skip_check.outputs.DO_NOT_BUILD != 'true'
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
+      - uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         if: steps.skip_check.outputs.DO_NOT_BUILD != 'true'
         id: meta
         with:
@@ -139,7 +139,7 @@ jobs:
 
       - name: Upload digest
         if: steps.skip_check.outputs.DO_NOT_BUILD != 'true'
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: digests-${{ matrix.image }}-${{ matrix.arch }}
           path: /tmp/digests-${{ matrix.image }}/*
@@ -168,7 +168,7 @@ jobs:
 
     steps:
       - name: Download digests
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           pattern: digests-${{ matrix.image }}-*
           path: /tmp/digests-download
@@ -181,11 +181,11 @@ jobs:
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ghcr.io/offbyone/${{ matrix.image }}
       - name: Log in to the Github Container registry
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/sidecar/Dockerfile b/sidecar/Dockerfile
index a0be2a9..291831c 100644
--- a/sidecar/Dockerfile
+++ b/sidecar/Dockerfile
@@ -1,4 +1,4 @@
-FROM tailscale/tailscale:v1.86.5
+FROM tailscale/tailscale:v1.90.6
 COPY connect.sh /connect.sh
 COPY --from=ghcr.io/jqlang/jq:1.8.0 /jq /usr/local/bin/jq
 HEALTHCHECK --interval=5s --timeout=10s --start-period=20s --retries=3 \