diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 673f161..790bdfa 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -97,6 +97,7 @@ jobs:
           test -f "$dist_dir/index.html"
           echo "dir=$dist_dir" >> "$GITHUB_OUTPUT"
           ref_name="${GITHUB_REF_NAME:-local}"
+          ref_name="${ref_name//[^a-zA-Z0-9._-]/-}"
           archive="codmin-${ref_name}-web-public.tar.gz"
           tar -czf "$archive" -C "$dist_dir" .
           echo "archive=codmin/$archive" >> "$GITHUB_OUTPUT"
diff --git a/Cargo.lock b/Cargo.lock
index cad1bae..0b9dbc6 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -634,6 +634,7 @@ dependencies = [
  "chrono",
  "coauth-account-types",
  "coauth-admin-types",
+ "coland-contracts",
  "dioxus",
  "dioxus-logger",
  "futures-util",
@@ -646,7 +647,6 @@ dependencies = [
  "reqwest 0.13.4",
  "serde",
  "serde_json",
- "coland-contracts",
  "urlencoding",
  "wasm-bindgen",
  "wasm-bindgen-futures",
@@ -3132,9 +3132,9 @@ dependencies = [
 
 [[package]]
 name = "quinn-proto"
-version = "0.11.16"
+version = "0.11.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560"
+checksum = "a9746dbde176634f4f2f1faf2404e30a31b2bc1e9cafb5329c95d8177a18c9fc"
 dependencies = [
  "aws-lc-rs",
  "bytes",
diff --git a/Dockerfile b/Dockerfile
index 0869133..6559deb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -74,6 +74,9 @@ RUN --network=default \
 
 FROM nginx:alpine
 
+# Apply available security fixes to packages inherited from the base image.
+RUN apk upgrade --no-cache
+
 COPY --from=builder /workspace/dist /usr/share/nginx/html
 COPY --chmod=755 codmin/docker-entrypoint.sh /docker-entrypoint.sh
 RUN mkdir -p /runtime && \