diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4153014..d16f6f8 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -68,7 +68,7 @@ jobs:
 
       - name: Build base image
         id: build-base
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf  # v7.2.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc  # v7.4.0
         # Push is best-effort on PRs; fork tokens may lack package write access
         continue-on-error: ${{ github.event_name == 'pull_request' }}
         env:
@@ -87,7 +87,7 @@ jobs:
 
       - name: Build ha-addon image
         id: build-ha-addon
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf  # v7.2.0
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc  # v7.4.0
         # Push is best-effort on PRs; fork tokens may lack package write access
         continue-on-error: ${{ github.event_name == 'pull_request' }}
         env: