diff --git a/.github/workflows/auto-versioning.yml b/.github/workflows/auto-versioning.yml
index e169bbae..f8bb9b08 100644
--- a/.github/workflows/auto-versioning.yml
+++ b/.github/workflows/auto-versioning.yml
@@ -91,11 +91,12 @@ jobs:
           CHARON_TOKEN: ${{ secrets.CHARON_TOKEN }}
 
       - name: Create GitHub Release (tag-only, no workspace changes)
-        if: ${{ steps.semver.outputs.changed && steps.check_release.outputs.exists == 'false' }}
+        if: ${{ steps.semver.outputs.changed == 'true' && steps.check_release.outputs.exists == 'false' }}
         uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
         with:
           tag_name: ${{ steps.determine_tag.outputs.tag }}
           name: Release ${{ steps.determine_tag.outputs.tag }}
           body: ${{ steps.semver.outputs.release_notes }}
+          make_latest: false
         env:
-          CHARON_TOKEN: ${{ secrets.CHARON_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 4c56288c..c8c10cf4 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -42,7 +42,7 @@ jobs:
           name: Go Benchmark
           tool: 'go'
           output-file-path: backend/output.txt
-          github-token: ${{ secrets.CHARON_TOKEN }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           auto-push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
           # Show alert with commit comment on detection of performance regression
           alert-threshold: '150%'
diff --git a/Dockerfile b/Dockerfile
index a355a76a..af4fe847 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -133,9 +133,9 @@ RUN --mount=type=cache,target=/root/.cache/go-build \
             # Renovate tracks these via regex manager in renovate.json
             # TODO: Remove this block once Caddy ships with fixed deps (check v2.10.3+)
             # renovate: datasource=go depName=github.com/expr-lang/expr
-            go get github.com/expr-lang/expr@v1.17.0 || true; \
+            go get github.com/expr-lang/expr@v1.17.6 || true; \
             # renovate: datasource=go depName=github.com/quic-go/quic-go
-            go get github.com/quic-go/quic-go@v0.54.1 || true; \
+            go get github.com/quic-go/quic-go@v0.57.1 || true; \
             # renovate: datasource=go depName=github.com/smallstep/certificates
             go get github.com/smallstep/certificates@v0.29.0 || true; \
             go mod tidy || true; \