diff --git a/.github/workflows/build-oci.yaml b/.github/workflows/build-oci.yaml
index 66acd16..385ed88 100644
--- a/.github/workflows/build-oci.yaml
+++ b/.github/workflows/build-oci.yaml
@@ -66,7 +66,7 @@ jobs:
       # Needed on a cache hit too: the login check below runs the images.
       - name: Set up qemu (emulated arches only)
         if: matrix.qemu
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
 
       # Emulated builds are ~single-core and the per-version chains are
       # independent, so run them in parallel. Past 2 they only contend for