diff --git a/.github/workflows/template/build-{{ostype}}.yaml.j2 b/.github/workflows/template/build-{{ostype}}.yaml.j2
index 0ae34ada4d..ab3f5bb66f 100644
--- a/.github/workflows/template/build-{{ostype}}.yaml.j2
+++ b/.github/workflows/template/build-{{ostype}}.yaml.j2
@@ -372,7 +372,7 @@ jobs:
       - name: Send e-mail on failed run
         if: failure() && contains(fromJSON('["schedule", "workflow_dispatch"]'), github.event_name)
         # freeze to v17
-        uses: dawidd6/action-send-mail@42942bc2f8fba4e611b459a018967a6a7c78c68c
+        uses: dawidd6/action-send-mail@03a02a49409134de07636216fb379a026c52991e
         with:
           server_address: ${{ secrets.NOTIFY_SMTP_HOST }}
           server_port: ${{ secrets.NOTIFY_SMTP_PORT }}
@@ -544,7 +544,7 @@ jobs:
       - name: Send e-mail on failed run
         if: failure() && contains(fromJSON('["schedule", "workflow_dispatch"]'), github.event_name)
         # freeze to v17
-        uses: dawidd6/action-send-mail@42942bc2f8fba4e611b459a018967a6a7c78c68c
+        uses: dawidd6/action-send-mail@03a02a49409134de07636216fb379a026c52991e
         with:
           server_address: ${{ secrets.NOTIFY_SMTP_HOST }}
           server_port: ${{ secrets.NOTIFY_SMTP_PORT }}
diff --git a/.github/workflows/tools/containers/buildenv-git-annex/Dockerfile b/.github/workflows/tools/containers/buildenv-git-annex/Dockerfile
index 5ce5628d56..18094cca77 100644
--- a/.github/workflows/tools/containers/buildenv-git-annex/Dockerfile
+++ b/.github/workflows/tools/containers/buildenv-git-annex/Dockerfile
@@ -16,7 +16,7 @@ RUN echo 'Acquire::http::Dl-Limit "200";' >| /etc/apt/apt.conf.d/20snapshots \
 # `apt-get build-dep`.  The Release files on snapshots are past their
 # Valid-Until, hence Check-Valid-Until=false.
 # NB: the build-linux-buildenv workflow parses DEBIAN_SNAPSHOT for image tags.
-ARG DEBIAN_SNAPSHOT=20260924T000000Z
+ARG DEBIAN_SNAPSHOT=20261006T000000Z
 RUN set -ex; \
     echo 'Acquire::Check-Valid-Until "false";' >| /etc/apt/apt.conf.d/10no-check-valid-until; \
     echo 'Acquire::http::Timeout "120";' >> /etc/apt/apt.conf.d/20snapshots; \
@@ -38,6 +38,8 @@ RUN set -ex; \
     apt-get update -qq; \
     export DEBIAN_FRONTEND=noninteractive; \
     apt-get build-dep -y -q git-annex; \
+    # git-annex >= 10.20261005 Build-Depends on ram, Debian's git-annex not (yet)
+    apt-get install -y libghc-ram-dev; \
     # Needed additional tools etc
     apt-get install -y devscripts quilt locales; \
     # Some helper utilities just in case