diff --git a/actions/docker/build-push-action/v5/action-types.yml b/actions/docker/build-push-action/v5/action-types.yml
index 6dfad444a..8cb72d397 100644
--- a/actions/docker/build-push-action/v5/action-types.yml
+++ b/actions/docker/build-push-action/v5/action-types.yml
@@ -105,6 +105,16 @@ inputs:
     type: string
   github-token:
     type: string
+  annotations:
+    type: list
+    separator: "\n"
+    list-item:
+      type: string
+  secret-envs:
+    type: list
+    separator: "\n"
+    list-item:
+      type: string
 # Please check those outputs's description and set a proper type. 'string' is just set by default
 outputs:
   imageid:
diff --git a/actions/docker/build-push-action/v5/commit-hash.txt b/actions/docker/build-push-action/v5/commit-hash.txt
index 4add9a253..dc4b014b8 100644
--- a/actions/docker/build-push-action/v5/commit-hash.txt
+++ b/actions/docker/build-push-action/v5/commit-hash.txt
@@ -1 +1 @@
-1a4d1a13fb219ebf616f93930a8c4c6a9ff24155
\ No newline at end of file
+4a13e500e55cf31b7a5d59a38ab2040ab0f42f56
\ No newline at end of file
diff --git a/library/src/gen/kotlin/io/github/typesafegithub/workflows/actions/docker/BuildPushActionV5.kt b/library/src/gen/kotlin/io/github/typesafegithub/workflows/actions/docker/BuildPushActionV5.kt
index a398d2c75..5cefc904d 100644
--- a/library/src/gen/kotlin/io/github/typesafegithub/workflows/actions/docker/BuildPushActionV5.kt
+++ b/library/src/gen/kotlin/io/github/typesafegithub/workflows/actions/docker/BuildPushActionV5.kt
@@ -36,6 +36,10 @@ public data class BuildPushActionV5 private constructor(
      * List of extra privileged entitlement (e.g., network.host,security.insecure)
      */
     public val allow: List<String>? = null,
+    /**
+     * List of annotation to set to the image
+     */
+    public val annotations: List<String>? = null,
     /**
      * List of attestation parameters (e.g., type=sbom,generator=image)
      */
@@ -121,6 +125,10 @@ public data class BuildPushActionV5 private constructor(
      * List of secrets to expose to the build (e.g., key=string, GIT_AUTH_TOKEN=mytoken)
      */
     public val secrets: List<String>? = null,
+    /**
+     * List of secret env vars to expose to the build (e.g., key=envname, MY_SECRET=MY_ENV_VAR)
+     */
+    public val secretEnvs: List<String>? = null,
     /**
      * List of secret files to expose to the build (e.g., key=filename, MY_SECRET=./secret.txt)
      */
@@ -164,6 +172,7 @@ public data class BuildPushActionV5 private constructor(
         vararg pleaseUseNamedArguments: Unit,
         addHosts: List<String>? = null,
         allow: List<String>? = null,
+        annotations: List<String>? = null,
         attests: List<String>? = null,
         buildArgs: List<String>? = null,
         buildContexts: List<String>? = null,
@@ -185,6 +194,7 @@ public data class BuildPushActionV5 private constructor(
         push: Boolean? = null,
         sbom: Boolean? = null,
         secrets: List<String>? = null,
+        secretEnvs: List<String>? = null,
         secretFiles: List<String>? = null,
         shmSize: String? = null,
         ssh: List<String>? = null,
@@ -194,12 +204,13 @@ public data class BuildPushActionV5 private constructor(
         githubToken: String? = null,
         _customInputs: Map<String, String> = mapOf(),
         _customVersion: String? = null,
-    ) : this(addHosts=addHosts, allow=allow, attests=attests, buildArgs=buildArgs,
-            buildContexts=buildContexts, builder=builder, cacheFrom=cacheFrom, cacheTo=cacheTo,
-            cgroupParent=cgroupParent, context=context, `file`=`file`, labels=labels, load=load,
-            network=network, noCache=noCache, noCacheFilters=noCacheFilters, outputs=outputs,
-            platforms=platforms, provenance=provenance, pull=pull, push=push, sbom=sbom,
-            secrets=secrets, secretFiles=secretFiles, shmSize=shmSize, ssh=ssh, tags=tags,
+    ) : this(addHosts=addHosts, allow=allow, annotations=annotations, attests=attests,
+            buildArgs=buildArgs, buildContexts=buildContexts, builder=builder, cacheFrom=cacheFrom,
+            cacheTo=cacheTo, cgroupParent=cgroupParent, context=context, `file`=`file`,
+            labels=labels, load=load, network=network, noCache=noCache,
+            noCacheFilters=noCacheFilters, outputs=outputs, platforms=platforms,
+            provenance=provenance, pull=pull, push=push, sbom=sbom, secrets=secrets,
+            secretEnvs=secretEnvs, secretFiles=secretFiles, shmSize=shmSize, ssh=ssh, tags=tags,
             target=target, ulimit=ulimit, githubToken=githubToken, _customInputs=_customInputs,
             _customVersion=_customVersion)
 
@@ -208,6 +219,7 @@ public data class BuildPushActionV5 private constructor(
         *listOfNotNull(
             addHosts?.let { "add-hosts" to it.joinToString("\n") },
             allow?.let { "allow" to it.joinToString("\n") },
+            annotations?.let { "annotations" to it.joinToString("\n") },
             attests?.let { "attests" to it.joinToString(",") },
             buildArgs?.let { "build-args" to it.joinToString("\n") },
             buildContexts?.let { "build-contexts" to it.joinToString("\n") },
@@ -229,6 +241,7 @@ public data class BuildPushActionV5 private constructor(
             push?.let { "push" to it.toString() },
             sbom?.let { "sbom" to it.toString() },
             secrets?.let { "secrets" to it.joinToString("\n") },
+            secretEnvs?.let { "secret-envs" to it.joinToString("\n") },
             secretFiles?.let { "secret-files" to it.joinToString("\n") },
             shmSize?.let { "shm-size" to it },
             ssh?.let { "ssh" to it.joinToString("\n") },