diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index da915dd7..84a99c2c 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -277,7 +277,7 @@ jobs:
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
 
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: ./sdk/cli
           file: ./sdk/cli/Dockerfile
@@ -323,7 +323,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and push ${{ matrix.service }}
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: ${{ matrix.context }}
           file: ${{ matrix.dockerfile }}
diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml
index c7380159..c1b383f3 100644
--- a/.github/workflows/docker-images.yml
+++ b/.github/workflows/docker-images.yml
@@ -61,7 +61,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           # Build context is the repository root for all services (the Dockerfiles
           # COPY repo-relative paths; agent-runtime builds the workspace packages).