diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index f30d3da..24a1b1e 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -62,7 +62,7 @@ jobs:
         with:
           fetch-depth: 0 # the newest tag is the version's base, as on the dev channel
 
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Free disk space
         run: sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aba745a..8c530ac 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -58,7 +58,7 @@ jobs:
       # runner (their build stages are pinned to $BUILDPLATFORM); the game images' runtime
       # stages run apt-get for the target platform, which for arm64 takes QEMU.
       - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       # Two architectures of five images plus BuildKit's cache outgrow the runner's free disk
       # with its preinstalled SDKs in place; none of them is used here.