diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index db76a9c..7076c3f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -69,7 +69,7 @@ jobs:
 
       - name: Build base image
         id: build-base
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f  # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf  # v7.2.0
         # Push is best-effort on PRs; fork tokens may lack package write access
         continue-on-error: ${{ github.event_name == 'pull_request' }}
         env:
@@ -88,7 +88,7 @@ jobs:
 
       - name: Build ha-addon image
         id: build-ha-addon
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f  # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf  # v7.2.0
         # Push is best-effort on PRs; fork tokens may lack package write access
         continue-on-error: ${{ github.event_name == 'pull_request' }}
         env: