diff --git a/.github/workflows/build-publish-rh8-image.yml b/.github/workflows/build-publish-rh8-image.yml
index 7c820eb290..727593536b 100644
--- a/.github/workflows/build-publish-rh8-image.yml
+++ b/.github/workflows/build-publish-rh8-image.yml
@@ -93,19 +93,19 @@ jobs:
             ${{ steps.meta-ee-public.outputs.labels }}-arm64
             org.opencontainers.image.licenses=Windmill-Enterprise-License
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract-ee-amd64
         with:
           image: ${{ steps.meta-ee-public.outputs.tags}}-amd64
           path: "/windmill/target/release/windmill"
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract-duckdb-ffi-internal
         with:
           image: ${{ steps.meta-ee-public.outputs.tags}}-amd64
           path: "/usr/src/app/libwindmill_duckdb_ffi_internal.so"
 
-      # - uses: shrink/actions-docker-extract@v3
+      # - uses: shrink/actions-docker-extract@v4
       #   id: extract-ee-arm64
       #   with:
       #     image: ${{ steps.meta-ee-public.outputs.tags}}-arm64
diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index b468387057..b1143ca8da 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -208,19 +208,19 @@ jobs:
           docker image inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ needs.build.outputs.digest }}
           docker image inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee@${{ needs.build_ee.outputs.digest }}
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract
         with:
           image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ needs.build.outputs.digest }}
           path: "/usr/src/app/windmill"
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract-duckdb-ffi-internal
         with:
           image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ needs.build.outputs.digest }}
           path: "/usr/src/app/libwindmill_duckdb_ffi_internal.so"
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract-ee
         with:
           image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee@${{ needs.build_ee.outputs.digest }}
@@ -313,13 +313,13 @@ jobs:
   #         docker image inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEV_SHA }}
   #         docker image inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee:${{ env.DEV_SHA }}
 
-  #     - uses: shrink/actions-docker-extract@v3
+  #     - uses: shrink/actions-docker-extract@v4
   #       id: extract
   #       with:
   #         image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.DEV_SHA }}
   #         path: "/usr/src/app/windmill"
 
-  #     - uses: shrink/actions-docker-extract@v3
+  #     - uses: shrink/actions-docker-extract@v4
   #       id: extract-ee
   #       with:
   #         image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee:${{ env.DEV_SHA }}
@@ -502,7 +502,7 @@ jobs:
         id: version
         run: echo "VERSION=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
 
-      - uses: shrink/actions-docker-extract@v3
+      - uses: shrink/actions-docker-extract@v4
         id: extract
         with:
           image: |-