diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
index 4a8f2840..11674ca7 100644
--- a/.github/workflows/publish-release.yaml
+++ b/.github/workflows/publish-release.yaml
@@ -1,16 +1,11 @@
 # Publish flant/shell-operator image on hub.docker.com.
-# Build 'latest' tag if started manually on default branch.
-# Build 'latest' tag when PR is merged into the default branch.
-# Build 'v*.*.*' and 'latest' tags on push released tag.
+# Build 'latest' tag when release is published.
 name: Publish release image
 
 on:
   workflow_dispatch:
-  pull_request:
-    types: [closed]
-  push:
-    tags:
-      - 'v*'
+  release:
+    types: [published]
 
 env:
   QEMU_PLATFORMS: arm64,arm
diff --git a/Dockerfile b/Dockerfile
index a8d700da..a1252518 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@ FROM --platform=${TARGETPLATFORM:-linux/amd64} flant/jq:b6be13d5-musl as libjq
 FROM --platform=${TARGETPLATFORM:-linux/amd64} golang:1.23-alpine3.21 AS builder
 
 ARG appVersion=latest
-RUN apk --no-cache add git ca-certificates gcc musl-dev libc-dev
+RUN apk --no-cache add git ca-certificates gcc musl-dev libc-dev binutils-gold
 
 # Cache-friendly download of go dependencies.
 ADD go.mod go.sum /app/
@@ -25,7 +25,7 @@ ARG TARGETPLATFORM
 RUN apk --no-cache add ca-certificates bash sed tini && \
     kubectlArch=$(echo ${TARGETPLATFORM:-linux/amd64} | sed 's/\/v7//') && \
     echo "Download kubectl for ${kubectlArch}" && \
-    wget https://storage.googleapis.com/kubernetes-release/release/v1.27.13/bin/${kubectlArch}/kubectl -O /bin/kubectl && \
+    wget https://dl.k8s.io/release/v1.30.12/bin/${kubectlArch}/kubectl -O /bin/kubectl && \
     chmod +x /bin/kubectl && \
     mkdir /hooks
 ADD frameworks/shell /frameworks/shell