diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 42d5c51c395..a5c1fa5f90c 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -45,7 +45,7 @@ jobs:
             type=sha,prefix=sha-
 
       - name: Build and publish Docker image
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .devcontainer
           push: ${{ github.event_name != 'pull_request' }}
diff --git a/.github/workflows/sphinxbuild.yml b/.github/workflows/sphinxbuild.yml
index 974dbd3f586..a36ad0d82bf 100644
--- a/.github/workflows/sphinxbuild.yml
+++ b/.github/workflows/sphinxbuild.yml
@@ -176,7 +176,7 @@ jobs:
 
       - name: Build and push image with SHA tag
         if: steps.changed.outputs.dockerfile_changed == 'true'
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .devcontainer
           push: true