diff --git a/.github/workflows/ci-main.yml b/.github/workflows/ci-main.yml
index 15080c922..563fc10e9 100644
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@@ -407,7 +407,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./docker/Dockerfile.base
diff --git a/.github/workflows/docker-multiarch.yml b/.github/workflows/docker-multiarch.yml
index d55086354..ccef1f09f 100644
--- a/.github/workflows/docker-multiarch.yml
+++ b/.github/workflows/docker-multiarch.yml
@@ -198,7 +198,7 @@ jobs:
             ubuntu.version=${{ matrix.ubuntu-version }}
 
       - name: Build and push to GHCR
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: docker/Dockerfile.multiarch
@@ -216,7 +216,7 @@ jobs:
 
       - name: Build and push to DockerHub
         if: inputs.push && steps.dockerhub-check.outputs.enabled == 'true'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         continue-on-error: true  # DockerHub is optional, don't fail if unavailable
         with:
           context: .