diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f315d2172..c98a5b028 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -91,7 +91,7 @@ jobs:
 
     - name: Build and push Web UI Image
       if: steps.changed_webui_files.outputs.any_changed == 'true'
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
       with:
         context: webui
         push: ${{ github.repository_owner == 'eclipse-openvsx' &&
@@ -156,7 +156,7 @@ jobs:
 
     - name: Build and push Server Image
       if: steps.changed_server_files.outputs.any_changed == 'true'
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
       with:
         context: server
         push: ${{ github.repository_owner == 'eclipse-openvsx' &&
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
index 4412fb715..2cf3d5c78 100644
--- a/.github/workflows/playwright.yml
+++ b/.github/workflows/playwright.yml
@@ -29,7 +29,7 @@ jobs:
       - name: Run Playwright tests
         working-directory: ./webui
         run: yarn smoke-tests
-      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f  # v7.0.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         if: always()
         with:
           name: playwright-report
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 86e807469..0768ff08f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
           org.opencontainers.image.title=OpenVSX WebUI
 
     - name: Build and push Web UI Image
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
       with:
         context: webui
         push: true
@@ -107,7 +107,7 @@ jobs:
           org.opencontainers.image.title=OpenVSX Server
 
     - name: Build and push Server Image
-      uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+      uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
       with:
         context: server
         push: true