diff --git a/.github/workflows/cd.metrics.release.build.yml b/.github/workflows/cd.metrics.release.build.yml
index 5cdd103d..3d4dd420 100644
--- a/.github/workflows/cd.metrics.release.build.yml
+++ b/.github/workflows/cd.metrics.release.build.yml
@@ -64,7 +64,7 @@ jobs:
           password: ${{ secrets.SKAHA_REGISTRY_TOKEN }}
       - name: Build and push multi-arch image
         id: build
-        uses: docker/build-push-action@v7.1.0
+        uses: docker/build-push-action@v7.2.0
         with:
           context: metrics
           file: metrics/Dockerfile
diff --git a/.github/workflows/cd.skaha.release.build.yml b/.github/workflows/cd.skaha.release.build.yml
index 5dadf070..8f61bc0b 100644
--- a/.github/workflows/cd.skaha.release.build.yml
+++ b/.github/workflows/cd.skaha.release.build.yml
@@ -62,7 +62,7 @@ jobs:
           password: ${{ secrets.SKAHA_REGISTRY_TOKEN }}
       - name: Build and Push Docker Image
         id: build
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           target: production
diff --git a/.github/workflows/ci.metrics.yml b/.github/workflows/ci.metrics.yml
index 32879598..72eb446d 100644
--- a/.github/workflows/ci.metrics.yml
+++ b/.github/workflows/ci.metrics.yml
@@ -110,7 +110,7 @@ jobs:
           cluster_name: metrics
           wait: 120s
       - name: Build Metrics image (cache-enabled)
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf
         with:
           context: ./metrics
           file: ./metrics/Dockerfile