diff --git a/.github/workflows/build-builder-image.yml b/.github/workflows/build-builder-image.yml
index 4ec7970..57faac4 100644
--- a/.github/workflows/build-builder-image.yml
+++ b/.github/workflows/build-builder-image.yml
@@ -49,7 +49,7 @@ jobs:
       # cache (`cache export not supported for docker driver`); the
       # docker-container driver created here can, so registry cache works
       - name: set up buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: login to ghcr
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0