diff --git a/.github/workflows/release_cli_and_assets.yml b/.github/workflows/release_cli_and_assets.yml
index 3992627a79..11936eba13 100644
--- a/.github/workflows/release_cli_and_assets.yml
+++ b/.github/workflows/release_cli_and_assets.yml
@@ -275,8 +275,8 @@ jobs:
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@v6
       with:
-        version: latest
-        args: release --snapshot --clean --skip-publish
+        version: '~> v1'
+        args: release --snapshot --clean --skip=publish
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -759,7 +759,7 @@ jobs:
     - name: Run GoReleaser
       uses: goreleaser/goreleaser-action@v6
       with:
-        version: latest
+        version: '~> v1'
         args: release --clean
       env:
         GITHUB_TOKEN: ${{ secrets.GH_ACCESS_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ef6f49f0ae..17cea21243 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,12 @@
+## v0.23.3 [2024-07-17]
+_Bug fixes_
+- When installing plugins, do not use local docker config for credential store if the plugin is being installed from GHCR, enabling installation from GHCR to work even if docker-credential-desktop not in PATH. ([#4323](https://github.com/turbot/steampipe/issues/4323))
+- Fix issue where steampipe returned 0 exit code even if failed to export snapshot. ([#4276](https://github.com/turbot/steampipe/issues/4276))
+- Query command should support legacy 'true' and 'false' for --timing flag. ([#4282](https://github.com/turbot/steampipe/issues/4282))
+- Fix issue where sps output is not working. ([#4297](https://github.com/turbot/steampipe/issues/4297))
+- When loading creating connection plugins, return connections successfully created even if some connections fail, due to config not being available. ([#474](https://github.com/turbot/steampipe-postgres-fdw/issues/474))
+- Show scan info in query JSON output only when timing config is verbose. ([#4292](https://github.com/turbot/steampipe/issues/4292))
+
 ## v0.23.2 [2024-05-17]
 _Bug fixes_
 - Update FDW to 1.11.2 to remove unnecessary NOTICE level log messages. ([#469](https://github.com/turbot/steampipe-postgres-fdw/issues/469))
diff --git a/pkg/constants/db.go b/pkg/constants/db.go
index e066db22b1..3774b3872e 100644
--- a/pkg/constants/db.go
+++ b/pkg/constants/db.go
@@ -28,7 +28,7 @@ const (
 // constants for installing db and fdw images
 const (
 	DatabaseVersion = "14.2.0"
-	FdwVersion      = "1.11.3"
+	FdwVersion      = "1.11.4"
 
 	// PostgresImageRef is the OCI Image ref for the database binaries
 	PostgresImageRef    = "us-docker.pkg.dev/steampipe/steampipe/db:14.2.0"
diff --git a/pkg/constants/image.go b/pkg/constants/image.go
new file mode 100644
index 0000000000..6922bc7ca5
--- /dev/null
+++ b/pkg/constants/image.go
@@ -0,0 +1,5 @@
+package constants
+
+const (
+	BaseImageRef = "ghcr.io/turbot/steampipe/plugins"
+)
diff --git a/pkg/ociinstaller/ocidownloader.go b/pkg/ociinstaller/ocidownloader.go
index aa580e08cf..e6afe7e5bb 100644
--- a/pkg/ociinstaller/ocidownloader.go
+++ b/pkg/ociinstaller/ocidownloader.go
@@ -3,6 +3,7 @@ package ociinstaller
 import (
 	"context"
 	"encoding/json"
+	"github.com/turbot/steampipe/pkg/constants"
 	"log"
 	"strings"
 
@@ -63,7 +64,12 @@ func (o *ociDownloader) Pull(ctx context.Context, ref string, mediaTypes []strin
 
 	// Get credentials from the docker credentials store
 	storeOpts := credentials.StoreOptions{}
-	credStore, err := credentials.NewStoreFromDocker(storeOpts)
+	var credStore *credentials.DynamicStore
+	if strings.HasPrefix(ref, constants.BaseImageRef) {
+		credStore, err = credentials.NewStore("", storeOpts)
+	} else {
+		credStore, err = credentials.NewStoreFromDocker(storeOpts)
+	}
 	if err != nil {
 		return nil, nil, nil, nil, err
 	}
diff --git a/pkg/version/version.go b/pkg/version/version.go
index f9ff191df2..fe6087c9ed 100644
--- a/pkg/version/version.go
+++ b/pkg/version/version.go
@@ -18,7 +18,7 @@ Also https://www.digitalocean.com/community/tutorials/using-ldflags-to-set-versi
 **/
 
 // The main version number that is being run at the moment.
-var steampipeVersion = "0.23.2"
+var steampipeVersion = "0.23.3"
 
 // A pre-release marker for the version. If this is "" (empty string)
 // then it means that it is a final release. Otherwise, this is a pre-release