diff --git a/.github/workflows/build-sandbox-go.yml b/.github/workflows/build-sandbox-go.yml
index 0c58148..f5efcc3 100644
--- a/.github/workflows/build-sandbox-go.yml
+++ b/.github/workflows/build-sandbox-go.yml
@@ -38,7 +38,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Log in to GHCR
         # Only log in for events that should publish. PRs build but don't push.
diff --git a/.github/workflows/build-sandbox-java.yml b/.github/workflows/build-sandbox-java.yml
index 36c77b0..1acdd39 100644
--- a/.github/workflows/build-sandbox-java.yml
+++ b/.github/workflows/build-sandbox-java.yml
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Log in to GHCR
         if: github.event_name != 'pull_request'
diff --git a/.github/workflows/build-sandbox-typescript.yml b/.github/workflows/build-sandbox-typescript.yml
index 7147279..778c43a 100644
--- a/.github/workflows/build-sandbox-typescript.yml
+++ b/.github/workflows/build-sandbox-typescript.yml
@@ -38,7 +38,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Log in to GHCR
         # Only log in for events that should publish. PRs build but don't push.
diff --git a/.github/workflows/build-sandbox.yml b/.github/workflows/build-sandbox.yml
index 7999418..4bfe6f3 100644
--- a/.github/workflows/build-sandbox.yml
+++ b/.github/workflows/build-sandbox.yml
@@ -36,7 +36,7 @@ jobs:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
 
       - name: Log in to GHCR
         # Only log in for events that should publish. PRs build but don't push.