diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index dcdfb4c2..810a4d56 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
         with:
-          version: v2025.9.19
-          sha256: 0a6074797e99f1ec027b36eb86a0b9bdadc934aa7beaac1bbfbc178872164269
+          version: v2025.10.1
+          sha256: b59f4166dc942111591c48218ea4754918049f395ec8c25c88857a9200093bd9
       - name: Run acceptance tests
         run: ./scripts/run-acceptance-tests.sh ${{ github.event.pull_request.head.sha }}
diff --git a/.github/workflows/lint-rest.yml b/.github/workflows/lint-rest.yml
index 58a827eb..fae07c9f 100644
--- a/.github/workflows/lint-rest.yml
+++ b/.github/workflows/lint-rest.yml
@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: jdx/mise-action@5ac50f778e26fac95da98d50503682459e86d566 # v3.2.0
         with:
-          version: v2025.9.19
-          sha256: 0a6074797e99f1ec027b36eb86a0b9bdadc934aa7beaac1bbfbc178872164269
+          version: v2025.10.1
+          sha256: b59f4166dc942111591c48218ea4754918049f395ec8c25c88857a9200093bd9
       - name: Lint
         run: mise run lint-rest
diff --git a/docker/install-cosign.sh b/docker/install-cosign.sh
index 91cbdd21..bc9cf4e7 100755
--- a/docker/install-cosign.sh
+++ b/docker/install-cosign.sh
@@ -23,7 +23,7 @@ fi
 ARCHIVE=cosign-"${VERSION}"-1."${ARCH}".rpm
 
 cd /tmp
-curl -O -L https://github.com/sigstore/cosign/releases/latest/download/"${ARCHIVE}"
-curl -O -L https://github.com/sigstore/cosign/releases/latest/download/cosign_checksums.txt
+curl -O -L https://github.com/sigstore/cosign/releases/download/v"${VERSION}"/"${ARCHIVE}"
+curl -O -L https://github.com/sigstore/cosign/releases/download/v"${VERSION}"/cosign_checksums.txt
 sha256sum -c cosign_checksums.txt --ignore-missing
 yum install -y "${ARCHIVE}"