diff --git a/.github/workflows/.test.yml b/.github/workflows/.test.yml
index 4c7aa3332..058c7eca7 100644
--- a/.github/workflows/.test.yml
+++ b/.github/workflows/.test.yml
@@ -92,7 +92,7 @@ jobs:
             });
       -
         name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: integration-tests-base
           set: |
@@ -161,7 +161,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Build test image
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: integration-tests
           set: |
diff --git a/.github/workflows/buildkit.yml b/.github/workflows/buildkit.yml
index 0242d8756..072d9df61 100644
--- a/.github/workflows/buildkit.yml
+++ b/.github/workflows/buildkit.yml
@@ -152,7 +152,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Run
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: govulncheck
         env:
diff --git a/.github/workflows/compatibility-releases.yml b/.github/workflows/compatibility-releases.yml
index 81dbb6f0a..eed23e4f6 100644
--- a/.github/workflows/compatibility-releases.yml
+++ b/.github/workflows/compatibility-releases.yml
@@ -40,7 +40,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Build integration-tests-base
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: integration-tests-base
           set: |
@@ -48,7 +48,7 @@ jobs:
             *.cache-to=type=gha,scope=${{ env.CACHE_SCOPE }},repository=${{ github.repository }},ghtoken=${{ github.token }}
       -
         name: Build test image
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: integration-tests
           set: |
diff --git a/.github/workflows/test-os.yml b/.github/workflows/test-os.yml
index c1099620e..67c8bcaaa 100644
--- a/.github/workflows/test-os.yml
+++ b/.github/workflows/test-os.yml
@@ -51,7 +51,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           provenance: false
           targets: binaries-for-test
@@ -271,7 +271,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Build
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: integration-tests-base
           set: |
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 312b2ea4e..e905bfec9 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -80,7 +80,7 @@ jobs:
           buildkitd-flags: --debug
       -
         name: Validate
-        uses: docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2.0
+        uses: docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3.0
         with:
           targets: ${{ matrix.target }}
           set: |