diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 38a8b0c..65eb11d 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -67,7 +67,7 @@ jobs:
       # the job would then go red for a cache write. A failed export just means
       # the next build is cold, and buildx still logs a warning.
       - name: Build and push Docker image
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
         with:
           context: .
           push: true