diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 938983c..eca84b1 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,7 +8,7 @@ on:
 
 env:
   # NOTE: the version is also defined in roapi_release.yml and Dockerfile
-  RUST_TC_VER: "1.84.0"
+  RUST_TC_VER: "1.84.1"
 
 jobs:
   build:
@@ -45,9 +45,11 @@ jobs:
         target: wasm32-unknown-unknown
         toolchain: stable
         override: true
+    - uses: taiki-e/install-action@v2
+      with:
+        tool: trunk
     - name: Build
       run: |
-        mold -run cargo install --locked trunk
         mold -run cargo build --features=ui
 
   database_test:
@@ -207,7 +209,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Build Docker image
-        uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: false
diff --git a/.github/workflows/columnq_cli_release.yml b/.github/workflows/columnq_cli_release.yml
index 719ff72..768ecfb 100644
--- a/.github/workflows/columnq_cli_release.yml
+++ b/.github/workflows/columnq_cli_release.yml
@@ -12,7 +12,7 @@ on:
 
 env:
   # NOTE: the version is also defined in build.yml and Dockerfile
-  RUST_TC_VER: "1.84.0"
+  RUST_TC_VER: "1.84.1"
 
 jobs:
   # skip tag version validation on non-release branch run
diff --git a/.github/workflows/roapi_release.yml b/.github/workflows/roapi_release.yml
index 169f2fe..986968e 100644
--- a/.github/workflows/roapi_release.yml
+++ b/.github/workflows/roapi_release.yml
@@ -12,7 +12,7 @@ on:
 
 env:
   # NOTE: the version is also defined in build.yml and Dockerfile
-  RUST_TC_VER: "1.84.0"
+  RUST_TC_VER: "1.84.1"
 
 jobs:
   validate-release-tag:
@@ -46,12 +46,15 @@ jobs:
         uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ env.RUST_TC_VER }}
-          target: aarch64-apple-darwin,x86_64-apple-darwin
+          target: aarch64-apple-darwin,x86_64-apple-darwin,wasm32-unknown-unknown
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: trunk
       - name: Install maturin
         run: pip3 install 'maturin<2'
       - name: Build wheels - x86_64
         run: |
-          maturin build -m roapi/Cargo.toml -b bin --target x86_64-apple-darwin --release --out dist --features=database-sqlite
+          maturin build -m roapi/Cargo.toml -b bin --target x86_64-apple-darwin --release --out dist --features=database-sqlite,ui
       - name: Build wheels - universal2
         env:
           DEVELOPER_DIR: /Applications/Xcode.app/Contents/Developer
@@ -59,7 +62,7 @@ jobs:
         run: |
           # set SDKROOT for C dependencies
           export SDKROOT=$(xcrun --sdk macosx --show-sdk-path)
-          maturin build -m roapi/Cargo.toml -b bin --release --target universal2-apple-darwin --out dist --features=database-sqlite
+          maturin build -m roapi/Cargo.toml -b bin --release --target universal2-apple-darwin --out dist --features=database-sqlite,ui
           pip install roapi --no-index --find-links dist --force-reinstall
       - name: Upload wheels
         uses: actions/upload-artifact@v4
@@ -97,12 +100,15 @@ jobs:
         uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ env.RUST_TC_VER }}
-          target: ${{ matrix.platform.target }}
+          target: ${{ matrix.platform.target }},wasm32-unknown-unknown
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: trunk
       - name: Install maturin
         run: pip3 install 'maturin<2'
       - name: Build wheels
         run: |
-          maturin build -m roapi/Cargo.toml -b bin --release --out dist --target ${{ matrix.platform.target }} --features=${{ matrix.platform.features }}
+          maturin build -m roapi/Cargo.toml -b bin --release --out dist --target ${{ matrix.platform.target }} --features=${{ matrix.platform.features }},ui
           pip install roapi --no-index --find-links dist --force-reinstall
           roapi --help
       - name: Upload wheels
@@ -185,8 +191,11 @@ jobs:
           rustup update ${{ env.RUST_TC_VER }}
           rustup target add \
             --toolchain ${{ env.RUST_TC_VER }} \
-            ${{ matrix.platform.target }}
+            ${{ matrix.platform.target }},wasm32-unknown-unknown
           rustup default ${{ env.RUST_TC_VER }}
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: trunk
       - name: Install build deps
         if: "contains(matrix.platform.name_suffix, 'openssl')"
         run: |
@@ -198,7 +207,7 @@ jobs:
           export RUSTFLAGS='${{ matrix.platform.rustflags }}'
           maturin build -m roapi/Cargo.toml -b bin --release -o dist \
             --target ${{ matrix.platform.target }} --manylinux ${{ matrix.platform.manylinux }} \
-            --no-default-features --features=${{ matrix.platform.features }}
+            --no-default-features --features=${{ matrix.platform.features }},ui
       - name: Upload wheels
         uses: actions/upload-artifact@v4
         if: "matrix.platform.upload == 'true'"
@@ -269,7 +278,7 @@ jobs:
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        uses: docker/metadata-action@v5
         with:
           flavor: |
             latest=true
@@ -278,7 +287,7 @@ jobs:
           images: ghcr.io/${{ github.repository_owner }}/roapi
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: true
diff --git a/Dockerfile b/Dockerfile
index 224a5f8..46bc4ac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,12 +1,16 @@
-ARG RUST_VER=1.84.0-bookworm
+ARG RUST_VER=1.84.1-bookworm
 ARG RUSTFLAGS='-C target-cpu=skylake'
-ARG FEATURES="database"
+ARG FEATURES="database,ui"
 
 # Step 0: Install cargo-chef
 FROM rust:${RUST_VER} AS chef
+
+RUN curl -L --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
+RUN cargo binstall trunk
+
 # We only pay the installation cost once,
 # it will be cached from the second build onwards
-RUN cargo install cargo-chef
+RUN cargo binstall cargo-chef
 # install cmake for snmalloc
 RUN apt-get update \
     && apt-get install --no-install-recommends -y cmake