diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ff7b5acdfd..7502957261 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -78,7 +78,7 @@ jobs:
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
 
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
diff --git a/.github/workflows/deploy-frontend.yml b/.github/workflows/deploy-frontend.yml
index aaa5968759..e713a3e667 100644
--- a/.github/workflows/deploy-frontend.yml
+++ b/.github/workflows/deploy-frontend.yml
@@ -308,7 +308,7 @@ jobs:
       # image definition. NEXT_PUBLIC_* is deliberately left at the Dockerfile's
       # defaults -- see the note on the build-args-free step below.
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: deploy/Dockerfile.frontend
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 0b5996ee42..b3a86b3479 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -87,7 +87,7 @@ jobs:
             type=raw,value=${{ steps.version.outputs.version }},enable={{is_default_branch}}
 
       - name: Build and push backend
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: deploy/Dockerfile.backend
@@ -196,7 +196,7 @@ jobs:
       # derivation from the serving host. aragora.ai itself is built with explicit
       # production values by deploy-frontend.yml's Vercel lane, not from this image.
       - name: Build and push frontend
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: deploy/Dockerfile.frontend
@@ -295,7 +295,7 @@ jobs:
             type=raw,value=${{ steps.version.outputs.version }},enable={{is_default_branch}}
 
       - name: Build and push operator
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: aragora-operator/
           file: aragora-operator/Dockerfile
diff --git a/.github/workflows/frontend-image-build.yml b/.github/workflows/frontend-image-build.yml
index 22942913c1..c520d6dda7 100644
--- a/.github/workflows/frontend-image-build.yml
+++ b/.github/workflows/frontend-image-build.yml
@@ -75,7 +75,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build frontend image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: deploy/Dockerfile.frontend