diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 7095e8e..4502775 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -77,7 +77,7 @@ jobs:
         docker push localhost:5000/kargo-render-base:latest-arm64
         docker push localhost:5000/kargo-render-base:latest-amd64
     - name: Build final image
-      uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+      uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
       with:
         build-args: |
           BASE_IMAGE=localhost:5000/kargo-render-base
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 748e79e..e74bf23 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -53,7 +53,7 @@ jobs:
         docker push localhost:5000/kargo-render-base:latest-amd64
     - name: Build and push final image
       id: image
-      uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+      uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
       with:
         platforms: linux/amd64,linux/arm64
         build-args: |