diff --git a/.github/workflows/.build.yml b/.github/workflows/.build.yml
index e8346842..8542a34a 100644
--- a/.github/workflows/.build.yml
+++ b/.github/workflows/.build.yml
@@ -152,7 +152,7 @@ jobs:
           version: latest
       -
         name: Build
-        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
+        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
         with:
           source: .
           targets: pkg-${{ inputs.name }}-${{ matrix.distro }}
@@ -168,7 +168,7 @@ jobs:
       -
         name: Verify
         if: ${{ matrix.verify }}
-        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
+        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
         with:
           source: .
           targets: verify-${{ inputs.name }}-${{ matrix.distro }}
@@ -219,7 +219,7 @@ jobs:
           tree -nh "./bin/pkg/${INPUT_NAME}"
       -
         name: Generate metadata
-        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
+        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
         with:
           source: .
           targets: metadata-${{ inputs.name }}
@@ -262,7 +262,7 @@ jobs:
       -
         name: Build release
         id: build
-        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
+        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
         with:
           source: .
           files: |
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index aacdf297..d99c8391 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -18,7 +18,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       -
         name: Run
-        uses: docker/bake-action@a66e1c87e2eca0503c343edf1d208c716d54b8a8 # v7.1.0
+        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
         with:
           source: .
           targets: validate