diff --git a/.github/workflows-source/ci-main.yml b/.github/workflows-source/ci-main.yml
index e96b8a97e85..81b54146f59 100644
--- a/.github/workflows-source/ci-main.yml
+++ b/.github/workflows-source/ci-main.yml
@@ -40,7 +40,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+    image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
   dind-large-setup: &dind-large-setup
     runs-on:
       group: dind-large
diff --git a/.github/workflows-source/ci-pr-only.yml b/.github/workflows-source/ci-pr-only.yml
index 71168659565..c3c6c494296 100644
--- a/.github/workflows-source/ci-pr-only.yml
+++ b/.github/workflows-source/ci-pr-only.yml
@@ -20,7 +20,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+    image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
   dind-small-setup: &dind-small-setup
     runs-on:
       group: dind-small
diff --git a/.github/workflows-source/release-testing.yml b/.github/workflows-source/release-testing.yml
index b936f341313..8b9fecbc325 100644
--- a/.github/workflows-source/release-testing.yml
+++ b/.github/workflows-source/release-testing.yml
@@ -6,9 +6,6 @@ on:
       - 'hotfix-*-rc--*'
       - 'rc--*'
   workflow_dispatch:
-  pull_request:
-    paths:
-      - '.github/workflows/release-testing.yml'
 
 env:
   CI_COMMIT_SHA: ${{ github.sha }}
@@ -30,7 +27,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+    image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
   dind-large-setup: &dind-large-setup
     runs-on:
       group: dind-large
diff --git a/.github/workflows-source/schedule-daily.yml b/.github/workflows-source/schedule-daily.yml
index c2461bbaed1..8701e5e681c 100644
--- a/.github/workflows-source/schedule-daily.yml
+++ b/.github/workflows-source/schedule-daily.yml
@@ -24,7 +24,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+    image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
   dind-large-setup: &dind-large-setup
     runs-on:
       group: dind-large
diff --git a/.github/workflows-source/schedule-hourly.yml b/.github/workflows-source/schedule-hourly.yml
index 8551128fd67..6e9e09ceee0 100644
--- a/.github/workflows-source/schedule-hourly.yml
+++ b/.github/workflows-source/schedule-hourly.yml
@@ -4,9 +4,6 @@ on:
   schedule:
     - cron: "0 * * * *"
   workflow_dispatch:
-  pull_request:
-    paths:
-      - '.github/workflows/schedule-hourly.yml'
 
 env:
   CI_COMMIT_SHA: ${{ github.sha }}
@@ -28,7 +25,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+    image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
   dind-large-setup: &dind-large-setup
     runs-on:
       group: dind-large
diff --git a/.github/workflows/ci-main.yml b/.github/workflows/ci-main.yml
index d42fbd83c9e..26372bdacb7 100644
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@@ -39,7 +39,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -87,7 +87,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     name: Bazel Build All Config Check
@@ -165,7 +165,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -189,7 +189,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -238,7 +238,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' && github.event_name != 'merge_group' }}
     steps:
@@ -331,7 +331,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -367,7 +367,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
diff --git a/.github/workflows/ci-pr-only.yml b/.github/workflows/ci-pr-only.yml
index fa88ced59ae..fde453e6ef3 100644
--- a/.github/workflows/ci-pr-only.yml
+++ b/.github/workflows/ci-pr-only.yml
@@ -21,7 +21,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 90
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -53,7 +53,7 @@ jobs:
     runs-on:
       group: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 30
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -86,7 +86,7 @@ jobs:
     runs-on:
       group: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 30
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
diff --git a/.github/workflows/container-autobuild.yml b/.github/workflows/container-autobuild.yml
index c5099f38467..645230e96a2 100644
--- a/.github/workflows/container-autobuild.yml
+++ b/.github/workflows/container-autobuild.yml
@@ -11,6 +11,7 @@ on:
       - '.bazelversion'
       - 'rust-toolchain.toml'
       - 'gitlab-ci/container/**'
+  workflow_dispatch:
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref && github.ref || github.run_id }}
diff --git a/.github/workflows/release-testing.yml b/.github/workflows/release-testing.yml
index 500abc2a96e..9922b2784be 100644
--- a/.github/workflows/release-testing.yml
+++ b/.github/workflows/release-testing.yml
@@ -5,9 +5,6 @@ on:
       - 'hotfix-*-rc--*'
       - 'rc--*'
   workflow_dispatch:
-  pull_request:
-    paths:
-      - '.github/workflows/release-testing.yml'
 env:
   CI_COMMIT_SHA: ${{ github.sha }}
   CI_COMMIT_REF_PROTECTED: ${{ github.ref_protected }}
@@ -31,7 +28,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 180 # 3 hours
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -56,7 +53,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 180 # 3 hours
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -80,7 +77,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     if: ${{ vars.RUN_CI == 'true' }}
     timeout-minutes: 90
     steps:
diff --git a/.github/workflows/schedule-daily.yml b/.github/workflows/schedule-daily.yml
index ca792733325..8748e2183ee 100644
--- a/.github/workflows/schedule-daily.yml
+++ b/.github/workflows/schedule-daily.yml
@@ -46,7 +46,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 720 # 12 hours
     # TODO: disable in GitLab before enabling here
     if: ${{ vars.RUN_CI == 'true' && false }}
@@ -77,7 +77,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 120
     # TODO: enable when zh1 is active again
     if: ${{ vars.RUN_CI == 'true' && false }}
@@ -112,7 +112,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 20
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -137,7 +137,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 480
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
diff --git a/.github/workflows/schedule-hourly.yml b/.github/workflows/schedule-hourly.yml
index 9f76c7f96a4..c80cf82402b 100644
--- a/.github/workflows/schedule-hourly.yml
+++ b/.github/workflows/schedule-hourly.yml
@@ -3,9 +3,6 @@ on:
   schedule:
     - cron: "0 * * * *"
   workflow_dispatch:
-  pull_request:
-    paths:
-      - '.github/workflows/schedule-hourly.yml'
 env:
   CI_COMMIT_SHA: ${{ github.sha }}
   CI_COMMIT_REF_PROTECTED: ${{ github.ref_protected }}
@@ -29,7 +26,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 120
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -50,7 +47,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 120
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
@@ -74,7 +71,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 120
     if: ${{ vars.RUN_CI == 'true' }}
     steps:
diff --git a/.github/workflows/schedule-weekly.yml b/.github/workflows/schedule-weekly.yml
index b6e6a0ed185..240c6fbe60a 100644
--- a/.github/workflows/schedule-weekly.yml
+++ b/.github/workflows/schedule-weekly.yml
@@ -4,9 +4,6 @@ on:
   schedule:
     - cron: "0 8 * * 3"
   workflow_dispatch:
-  pull_request:
-    paths:
-      - '.github/workflows/schedule-weekly.yml'
 
 env:
   DOCKER_HUB_USER: ${{ secrets.DOCKER_HUB_USER }}
@@ -17,7 +14,7 @@ jobs:
     runs-on:
       group: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:5bd0f059ad6e21966e9c644516b6ecd52d5ed44f1b18a76b91b59740a9d639a2
+      image: ghcr.io/dfinity/ic-build@sha256:b7d870287df55b9972ed285fe1a9792cb81243523400d83d491f3ee149e8d47c
     timeout-minutes: 60 # 1 hour
     if: ${{ vars.RUN_CI == 'true' }} # needed to avoid running on public dfinity org until published
     steps:
diff --git a/gitlab-ci/container/TAG_GH b/gitlab-ci/container/TAG_GH
index 30b5e2446c0..994ea02cb11 100644
--- a/gitlab-ci/container/TAG_GH
+++ b/gitlab-ci/container/TAG_GH
@@ -1 +1 @@
-f9d8505c07589b765e3897eafb7b48902ee7e2bb088fc8ac329544081bede1bf
+24bbf7e3a37a1de06f55b44b3419a92a929f919ba8e1dacb540255a17de36ad7