diff --git a/.cargo/audit.toml b/.cargo/audit.toml
new file mode 100644
index 0000000000..8f0abadefa
--- /dev/null
+++ b/.cargo/audit.toml
@@ -0,0 +1,4 @@
+[advisories]
+# RUSTSEC-2021-0139: `ansi_term` is Unmaintained. It is a transient dependency of penumbra crates
+# and dylint, so cannot easily be replaced.
+ignore = ["RUSTSEC-2021-0139"]
diff --git a/.github/workflows/reusable-docker-build.yml b/.github/workflows/reusable-docker-build.yml
index 538014326a..4ce69b6edf 100644
--- a/.github/workflows/reusable-docker-build.yml
+++ b/.github/workflows/reusable-docker-build.yml
@@ -37,6 +37,7 @@ jobs:
       - uses: actions/checkout@v4
         with:
           ref: ${{ inputs.tag }}
+          submodules: 'true'
       - uses: depot/setup-action@v1
       - name: Login to Docker Hub
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'astriaorg/astria'
diff --git a/Cargo.lock b/Cargo.lock
index 365d6010e1..9e2329ec20 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4319,9 +4319,9 @@ dependencies = [
 
 [[package]]
 name = "jobserver"
-version = "0.1.29"
+version = "0.1.31"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f08474e32172238f2827bd160c67871cdb2801430f65c3979184dc362e3ca118"
+checksum = "d2b099aaa34a9751c5bf0878add70444e1ed2dd73f347be99003d4577277de6e"
 dependencies = [
  "libc",
 ]