diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5367ab3..4be8f94 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -438,7 +438,7 @@ jobs:
         requested-token-type: urn:pulumi:token-type:access_token:organization
         export-environment-variables: false
     - name: Export AWS Credentials
-      uses: pulumi/esc-action@efb0bc8946938f0dfbfa00e829196ec95f0d0ea7 # v1.4.0
+      uses: pulumi/esc-action@41fd832f44f4820124b5350b5f84a00f741f234e # v1.3.0
       env:
         PULUMI_ACCESS_TOKEN: ${{ steps.generate_pulumi_token.outputs.pulumi-access-token }}
       with:
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index 67b2e62..0a27ea9 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -429,7 +429,7 @@ jobs:
         requested-token-type: urn:pulumi:token-type:access_token:organization
         export-environment-variables: false
     - name: Export AWS Credentials
-      uses: pulumi/esc-action@efb0bc8946938f0dfbfa00e829196ec95f0d0ea7 # v1.4.0
+      uses: pulumi/esc-action@41fd832f44f4820124b5350b5f84a00f741f234e # v1.3.0
       env:
         PULUMI_ACCESS_TOKEN: ${{ steps.generate_pulumi_token.outputs.pulumi-access-token }}
       with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 34322d5..3dc0939 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -429,7 +429,7 @@ jobs:
         requested-token-type: urn:pulumi:token-type:access_token:organization
         export-environment-variables: false
     - name: Export AWS Credentials
-      uses: pulumi/esc-action@efb0bc8946938f0dfbfa00e829196ec95f0d0ea7 # v1.4.0
+      uses: pulumi/esc-action@41fd832f44f4820124b5350b5f84a00f741f234e # v1.3.0
       env:
         PULUMI_ACCESS_TOKEN: ${{ steps.generate_pulumi_token.outputs.pulumi-access-token }}
       with:
diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml
index b1e22e9..07fa554 100644
--- a/.github/workflows/run-acceptance-tests.yml
+++ b/.github/workflows/run-acceptance-tests.yml
@@ -454,7 +454,7 @@ jobs:
         requested-token-type: urn:pulumi:token-type:access_token:organization
         export-environment-variables: false
     - name: Export AWS Credentials
-      uses: pulumi/esc-action@efb0bc8946938f0dfbfa00e829196ec95f0d0ea7 # v1.4.0
+      uses: pulumi/esc-action@41fd832f44f4820124b5350b5f84a00f741f234e # v1.3.0
       env:
         PULUMI_ACCESS_TOKEN: ${{ steps.generate_pulumi_token.outputs.pulumi-access-token }}
       with:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4672546..b8b6100 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,22 +2,49 @@
 
 ## 0.0.11 (2025-04-11)
 
-### Added
-
-- Multiple exports are now allowed if the build daemon is detected to have
-  version 0.13 of Buildkit or newer. (<https://github.com/pulumi/pulumi-docker-build/issues/21>)
--  Use 'buildkit' as default scope (<https://github.com/pulumi/pulumi-docker-build/pull/516>)
-
 ### Changed
 
-- Upgraded buildx from 0.16.0 to 0.20.1.
+- Upgraded buildx from 0.18.0 to 0.20.1 to remain compatible with upcoming
+  changes to GitHub Actions. (https://github.com/pulumi/pulumi-docker-build/pull/519)
 
 ### Fixed
 
-- Custom `# syntax=` directives no longer cause validation errors. (<https://github.com/pulumi/pulumi-docker-build/issues/300>)
 - Upgrading docker-build no longer causes resource replacements. (<https://github.com/pulumi/pulumi-docker-build/issues/404>)
-- Fixed leaking the GitHub actions secret in diff logs. (<https://github.com/pulumi/pulumi-docker-build/issues/403>)
-- Provider panics when using Image resource with exec set to true. (<https://github.com/pulumi/pulumi-docker-build/issues/482>)
+- Fixed a panic that could occur in `exec` mode. (https://github.com/pulumi/pulumi-docker-build/issues/482)
+- The default GitHub Actions cache scope is now correctly set as `buildkit`. (https://github.com/pulumi/pulumi-docker-build/issues/496)
+
+## 0.0.10 (2025-01-27)
+
+### Changed
+
+- Windows binaries are now signed. (https://github.com/pulumi/pulumi-docker-build/pull/429)
+
+## 0.0.9 (2025-01-16)
+
+### Changed
+
+- Upgraded pulumi-go-provider to v0.24.1. (https://github.com/pulumi/pulumi-docker-build/pull/413)
+
+### Fixed
+
+- `ACTIONS_RUNTIME_TOKEN` is now correctly marked as a secret. (https://github.com/pulumi/pulumi-docker-build/issues/403)
+
+## 0.0.8 (2024-12-10)
+
+### Added
+
+- Multiple exports are now allowed if the build daemon is detected to have
+  version 0.13 of Buildkit or newer.
+  (https://github.com/pulumi/pulumi-docker-build/issues/21)
+
+### Changed
+
+- Upgraded buildx from 0.16.0 to 0.18.0.
+
+### Fixed
+
+- Custom `# syntax=` directives no longer cause validation errors.
+  (https://github.com/pulumi/pulumi-docker-build/issues/300)
 
 ## 0.0.7 (2024-10-16)
 
diff --git a/examples/yaml_test.go b/examples/yaml_test.go
index 61794ae..3b8cc5b 100644
--- a/examples/yaml_test.go
+++ b/examples/yaml_test.go
@@ -1,3 +1,6 @@
+//go:build yaml || all
+// +build yaml all
+
 package examples
 
 import (