diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0dd8e2c..06e01af 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -565,7 +565,7 @@ jobs:
         id: slack-summary
         # Pinned to a SHA — automatically updated by the update-self-refs job after each release.
         # GitHub Actions requires static `uses:` values, so we can't pin dynamically.
-        uses: docker/docker-agent-action@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
         with:
           agent: agentcatalog/github-action-release-notes
           prompt: |
diff --git a/.github/workflows/review-pr.yml b/.github/workflows/review-pr.yml
index a7822bc..5f0cdda 100644
--- a/.github/workflows/review-pr.yml
+++ b/.github/workflows/review-pr.yml
@@ -158,7 +158,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.context-exists.outputs.exists == 'true'
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Verify token for cross-run artifact download
         if: steps.context-exists.outputs.exists == 'true'
@@ -436,7 +436,7 @@ jobs:
         if: |
           steps.command.outputs.is_review != 'false' &&
           steps.draft.outputs.skip != 'true'
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Check if org member
         id: membership
@@ -535,7 +535,7 @@ jobs:
           steps.rate.outputs.anomalous != 'true'
         id: run-review
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/review-pr@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
         with:
           pr-head-sha: ${{ steps.pr.outputs.head-sha }}
           pr-base-sha: ${{ steps.pr.outputs.base-sha }}
@@ -626,7 +626,7 @@ jobs:
 
       - name: Setup cross-run credentials
         if: inputs.trigger-run-id != ''
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Verify token for cross-run artifact download
         if: inputs.trigger-run-id != ''
@@ -811,7 +811,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.check.outputs.is_agent == 'true'
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Check authorization
         if: steps.check.outputs.is_agent == 'true'
@@ -971,7 +971,7 @@ jobs:
       - name: Run reply
         if: steps.check.outputs.is_agent == 'true' && steps.auth.outputs.authorized == 'true'
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr/reply@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/review-pr/reply@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
         with:
           thread-context: ${{ steps.thread.outputs.prompt }}
           comment-id: ${{ steps.feedback.outputs.comment-id }}
@@ -1046,7 +1046,7 @@ jobs:
 
     steps:
       - name: Setup direct credentials
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Validate canonical context artifact ID
         id: canonical-artifact
@@ -1174,12 +1174,12 @@ jobs:
 
       - name: Setup credentials
         if: steps.resolve-event.outputs.path != ''
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Run mention-reply handler
         id: mention-context
         if: steps.resolve-event.outputs.path != ''
-        uses: docker/docker-agent-action/.github/actions/mention-reply@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/.github/actions/mention-reply@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
         env:
           GITHUB_EVENT_PATH: ${{ steps.resolve-event.outputs.path }}
           GITHUB_EVENT_NAME: ${{ steps.resolve-event.outputs.name }}
@@ -1191,7 +1191,7 @@ jobs:
         if: steps.mention-context.outputs.should-reply == 'true'
         id: run-reply
         continue-on-error: true
-        uses: docker/docker-agent-action/review-pr/mention-reply@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/review-pr/mention-reply@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
         with:
           mention-context: ${{ steps.mention-context.outputs.prompt }}
           owner: ${{ steps.mention-context.outputs.owner }}
diff --git a/.github/workflows/test-e2e-reviewer.yml b/.github/workflows/test-e2e-reviewer.yml
index f71e078..5fb27ca 100644
--- a/.github/workflows/test-e2e-reviewer.yml
+++ b/.github/workflows/test-e2e-reviewer.yml
@@ -87,7 +87,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.fork-check.outputs.is_fork != 'true'
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Write synthetic issue_comment event
         if: steps.fork-check.outputs.is_fork != 'true'
@@ -191,7 +191,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.fork-check.outputs.is_fork != 'true'
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Create anchor review comment
         if: steps.fork-check.outputs.is_fork != 'true'
diff --git a/.github/workflows/update-docker-agent-version.yml b/.github/workflows/update-docker-agent-version.yml
index 2812791..a76632c 100644
--- a/.github/workflows/update-docker-agent-version.yml
+++ b/.github/workflows/update-docker-agent-version.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup credentials
-        uses: docker/docker-agent-action/setup-credentials@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+        uses: docker/docker-agent-action/setup-credentials@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
 
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/review-pr/action.yml b/review-pr/action.yml
index e2eaba0..857a1d3 100644
--- a/review-pr/action.yml
+++ b/review-pr/action.yml
@@ -713,7 +713,7 @@ runs:
     - name: Process pending feedback
       if: steps.lock-check.outputs.skip != 'true' && steps.pending-feedback.outputs.has_feedback == 'true'
       continue-on-error: true
-      uses: docker/docker-agent-action@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+      uses: docker/docker-agent-action@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
       env:
         ACTION_PATH: ${{ github.action_path }}
         PR_HEAD_SHA: ${{ steps.pr-info.outputs.head-sha }}
@@ -931,7 +931,7 @@ runs:
     - name: Run PR Review
       if: steps.lock-check.outputs.skip != 'true'
       id: run-review
-      uses: docker/docker-agent-action@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+      uses: docker/docker-agent-action@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/mention-reply/action.yml b/review-pr/mention-reply/action.yml
index 2404f5d..b92ce08 100644
--- a/review-pr/mention-reply/action.yml
+++ b/review-pr/mention-reply/action.yml
@@ -85,7 +85,7 @@ runs:
     - name: Run mention reply agent
       id: run-mention-reply
       continue-on-error: true
-      uses: docker/docker-agent-action@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+      uses: docker/docker-agent-action@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/reply/action.yml b/review-pr/reply/action.yml
index 1dcc7f3..88d44d9 100644
--- a/review-pr/reply/action.yml
+++ b/review-pr/reply/action.yml
@@ -76,7 +76,7 @@ runs:
     - name: Run reply agent
       id: run-reply
       continue-on-error: true
-      uses: docker/docker-agent-action@b08367e7e9a471822464be2bb9fdaa1c0fb6061b # v2.0.4
+      uses: docker/docker-agent-action@06e1767af06263c93d712449cbf859778d9392ee # v2.0.5
       env:
         ACTION_PATH: ${{ github.action_path }}
       with: