diff --git a/.github/workflows/ubi-rust-builder.yml b/.github/workflows/ubi-rust-builder.yml
index f7fe235c4..4b0bd929e 100644
--- a/.github/workflows/ubi-rust-builder.yml
+++ b/.github/workflows/ubi-rust-builder.yml
@@ -40,7 +40,7 @@ jobs:
           persist-credentials: false
 
       - name: Login to Stackable Harbor
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: oci.stackable.tech
           username: robot$sdp+github-action-build
@@ -92,7 +92,7 @@ jobs:
           persist-credentials: false
 
       - name: Login to Stackable Harbor
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
         with:
           registry: oci.stackable.tech
           username: robot$sdp+github-action-build
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f391a122..9152b0b43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ All notable changes to this project will be documented in this file.
 ### Changed
 
 - hbase: Update `hbase-opa-authorizer` from `0.1.0` to `0.2.0` and then `0.3.0` ([#1446], [#1454]).
+- ci: Bump `docker/login-action` from `v3.6.0` to `v4.1.0` to escape Node.js 20 deprecation ([#1507]).
 
 ### Fixed
 
@@ -32,6 +33,7 @@ All notable changes to this project will be documented in this file.
 [#1474]: https://github.com/stackabletech/docker-images/pull/1474
 [#1476]: https://github.com/stackabletech/docker-images/pull/1476
 [#1481]: https://github.com/stackabletech/docker-images/pull/1481
+[#1507]: https://github.com/stackabletech/docker-images/pull/1507
 
 ## [26.3.0] - 2026-03-16