diff --git a/.github/workflows/.build.yml b/.github/workflows/.build.yml
index efff4f85..554fa977 100644
--- a/.github/workflows/.build.yml
+++ b/.github/workflows/.build.yml
@@ -130,7 +130,7 @@ jobs:
 
   # TODO: add RH_USER and RH_PASS to the build job once we have a way to pass secrets: https://github.com/docker/github-builder/pull/248
   build:
-    uses: docker/github-builder/.github/workflows/bake.yml@3415a188caae9a0da7fba83bc06985776e0b1790 # v1.14.0
+    uses: docker/github-builder/.github/workflows/bake.yml@27ade872c1e2296e62ef15ab3b10d37665e57cf7 # v1.15.0
     permissions:
       contents: read
       id-token: write
@@ -294,7 +294,7 @@ jobs:
           bake-target: meta-helper
       -
         name: Login to Docker Hub
-        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+        uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
         if: ${{ inputs.release || github.event_name == 'schedule' }}
         with:
           username: ${{ inputs.dockerhub_username }}