diff --git a/.github/workflows/build-docker.yaml b/.github/workflows/build-docker.yaml
index 24d433f..76f80ed 100644
--- a/.github/workflows/build-docker.yaml
+++ b/.github/workflows/build-docker.yaml
@@ -19,35 +19,34 @@ jobs:
     steps:
       - uses: actions/checkout@v6
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
         with:
           platforms: linux/amd64,linux/arm64
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Set up cosign
         if: ${{ github.event_name != 'pull_request' }}
         uses: sigstore/cosign-installer@v3
       - name: login to Docker Hub
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PASSWORD }}
       - name: login to quay.io
         if: ${{ github.event_name != 'pull_request' }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: quay.io
           username: ${{ secrets.QUAYIO_USERNAME }}
           password: ${{ secrets.QUAYIO_PASSWORD }}
       - name: Build and push
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@v7
         id: bake
         with:
           builder: ${{ steps.buildx.outputs.name }}
-          source: .
-          workdir: dockerfiles
+          source: ./dockerfiles/
           provenance: true
           sbom: true
           push: ${{ github.event_name != 'pull_request' }}