diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f148c6a0..2bb07100 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -40,7 +40,7 @@ jobs:
 
       - name: List all targets
         id: all-targets
-        uses: docker/bake-action/subaction/list-targets@37816e747588cb137173af99ab33873600c46ea8 # v6.8.0
+        uses: docker/bake-action/subaction/list-targets@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
         with:
           workdir: ./deployments/docker
           target: default
diff --git a/.github/workflows/reusable-docker.yml b/.github/workflows/reusable-docker.yml
index 5b11d18b..4bee10ec 100644
--- a/.github/workflows/reusable-docker.yml
+++ b/.github/workflows/reusable-docker.yml
@@ -67,7 +67,7 @@ jobs:
             type=raw,value=latest,enable=${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags') }}
 
       - name: Build and push
-        uses: docker/bake-action@37816e747588cb137173af99ab33873600c46ea8 # v6.8.0
+        uses: docker/bake-action@3acf805d94d93a86cce4ca44798a76464a75b88c # v6.9.0
         with:
           files: |
             ${{ inputs.bake-file }}