diff --git a/gh-actions/docker/cache/prime/action.yml b/gh-actions/docker/cache/prime/action.yml
index faba0909c..b6c698fa4 100644
--- a/gh-actions/docker/cache/prime/action.yml
+++ b/gh-actions/docker/cache/prime/action.yml
@@ -22,20 +22,20 @@ outputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.1.10
     if: ${{ inputs.lock-app-id && inputs.lock-app-key }}
     name: Fetch app auth
     id: appauth
     with:
       app_id: ${{ inputs.lock-app-id }}
       key: ${{ inputs.lock-app-key }}
-  - uses: envoyproxy/toolshed/gh-actions/github/mutex@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/github/mutex@actions-v0.1.10
     if: ${{ steps.appauth.outputs.token || inputs.lock-token }}
     with:
       key: ${{ inputs.lock-id || inputs.image_tag }}
       repository: ${{ inputs.lock-repository }}
       token: ${{ steps.appauth.outputs.token || inputs.lock-token }}
-  - uses: envoyproxy/toolshed/gh-actions/cache/prime@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/cache/prime@actions-v0.1.10
     id: prime
     with:
       key: "${{ inputs.image_tag }}"
diff --git a/gh-actions/docker/cache/restore/action.yml b/gh-actions/docker/cache/restore/action.yml
index 04fb8d0b2..471351a2d 100644
--- a/gh-actions/docker/cache/restore/action.yml
+++ b/gh-actions/docker/cache/restore/action.yml
@@ -7,7 +7,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/cache/restore@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/cache/restore@actions-v0.1.10
     with:
       key: ${{ inputs.image_tag }}
       command: |
diff --git a/gh-actions/docker/fetch/action.yml b/gh-actions/docker/fetch/action.yml
index ab1c22ea6..b5b1e115f 100644
--- a/gh-actions/docker/fetch/action.yml
+++ b/gh-actions/docker/fetch/action.yml
@@ -14,7 +14,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/fetch@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/fetch@actions-v0.1.10
     id: fetch
     with:
       url: ${{ inputs.url }}
diff --git a/gh-actions/docker/shas/action.yml b/gh-actions/docker/shas/action.yml
index 78f9fbc09..47a589492 100644
--- a/gh-actions/docker/shas/action.yml
+++ b/gh-actions/docker/shas/action.yml
@@ -12,17 +12,17 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.10
     id: yaml
     with:
       yaml: ${{ inputs.images }}
-  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.10
     id: json_actions
     with:
       input: ${{ steps.yaml.outputs.json }}
       filter: |
         {runs: {using: "composite", steps: [to_entries[] | {
-          uses: "envoyproxy/toolshed/gh-actions/docker/sha@actions-v0.1.9",
+          uses: "envoyproxy/toolshed/gh-actions/docker/sha@actions-v0.1.10",
           id: .key,
           with: {
             image: .value,
diff --git a/gh-actions/github/checkout/action.yml b/gh-actions/github/checkout/action.yml
index 793c5489a..5964ce649 100644
--- a/gh-actions/github/checkout/action.yml
+++ b/gh-actions/github/checkout/action.yml
@@ -29,20 +29,20 @@ runs:
   steps:
   - name: Fetch token for app auth
     id: appauth
-    uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.1.9
+    uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.1.10
     if: ${{ inputs.app_id && inputs.app_key }}
     with:
       app_id: ${{ inputs.app_id }}
       key: ${{ inputs.app_key }}
   - name: Parse YAML config
     id: parsed
-    uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.9
+    uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.10
     with:
       yaml: ${{ inputs.config || '{}' }}
   - name: Add auth token to config
     id: config
     if: ${{ steps.appauth.outputs.token }}
-    uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.9
+    uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.10
     with:
       input: ${{ steps.parsed.outputs.json }}
       filter: |
diff --git a/gh-actions/github/merge-commit/action.yml b/gh-actions/github/merge-commit/action.yml
index de710469c..186cc3d04 100644
--- a/gh-actions/github/merge-commit/action.yml
+++ b/gh-actions/github/merge-commit/action.yml
@@ -31,7 +31,7 @@ runs:
     shell: bash
     env:
       URL: https://api.github.com/repos/${{ inputs.repository }}/pulls/${{ inputs.pr }}
-  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.10
     id: jq
     with:
       input: ${{ steps.fetch.outputs.response }}
diff --git a/gh-actions/github/pr/action.yml b/gh-actions/github/pr/action.yml
index f928d26d4..5723c3be8 100644
--- a/gh-actions/github/pr/action.yml
+++ b/gh-actions/github/pr/action.yml
@@ -68,7 +68,7 @@ runs:
     working-directory: ${{ inputs.working-directory }}
     shell: bash
   - name: Upload diff
-    uses: envoyproxy/toolshed/gh-actions/upload/diff@actions-v0.1.9
+    uses: envoyproxy/toolshed/gh-actions/upload/diff@actions-v0.1.10
     if: ${{ inputs.diff-upload }}
     with:
       diff: HEAD^1
diff --git a/gh-actions/github/run/action.yml b/gh-actions/github/run/action.yml
index c36543972..b17acfe3e 100644
--- a/gh-actions/github/run/action.yml
+++ b/gh-actions/github/run/action.yml
@@ -51,13 +51,16 @@ runs:
           COMMAND+=(${{ inputs.container-command }})
       fi
       if [[ -n "${{ inputs.container-command }}" && -n "${{ inputs.command-prefix }}" ]]; then
-          COMMAND+=(bash -c '${{ inputs.command-prefix }} ${{ inputs.command }}')
+          COMMAND+=('${{ inputs.command-prefix }} ${{ inputs.command }}')
       else
           COMMAND+=(
               ${{ inputs.command-prefix }}
               ${{ inputs.command }})
       fi
       TMP_OUTPUT=$(mktemp)
+      if [[ -n "$RUNNER_DEBUG" || -n "$CI_DEBUG" ]]; then
+          echo "DEBUG: RUN ${COMMAND[*]}" >&2
+      fi
       "${COMMAND[@]}" 2> >(tee "$TMP_OUTPUT") || {
           FAILED=true
       }
diff --git a/gh-actions/json/table/action.yml b/gh-actions/json/table/action.yml
index f8aaec772..502a69227 100644
--- a/gh-actions/json/table/action.yml
+++ b/gh-actions/json/table/action.yml
@@ -24,7 +24,7 @@ outputs:
 runs:
   using: composite
   steps:
-  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.1.10
     name: Generate table
     id: table
     with:
diff --git a/gh-actions/using/recurse/action.yml b/gh-actions/using/recurse/action.yml
index 606bf3bb8..956bdc2d6 100644
--- a/gh-actions/using/recurse/action.yml
+++ b/gh-actions/using/recurse/action.yml
@@ -12,7 +12,7 @@ runs:
   steps:
   # .tmp.action/action.yml **must** be hardcoded
 
-  - uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.9
+  - uses: envoyproxy/toolshed/gh-actions/yaml/tojson@actions-v0.1.10
     id: yaml
     with:
       yaml: ${{ inputs.with }}