diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
index a1d46a71..3d21f942 100644
--- a/.github/workflows/benchmarks.yml
+++ b/.github/workflows/benchmarks.yml
@@ -104,7 +104,7 @@ jobs:
             exit 1
           fi
 
-      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
 
       - name: Build remaining artifacts (initrd and shim)
         run: docker buildx bake host-binaries guest-binaries
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ee67a379..f27f1d36 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -40,7 +40,7 @@ jobs:
       - uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa  # v2.1.0
         with:
           version: 3.x
-      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
       - run: task validate
 
   #
@@ -245,7 +245,7 @@ jobs:
           ls -lh _output/nerdbox-kernel-${{ matrix.arch }}
           file _output/nerdbox-kernel-${{ matrix.arch }}
 
-      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd  # v4.0.0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5  # v4.1.0
 
       - name: Build remaining artifacts (initrd and shim)
         run: |