diff --git a/.github/workflows/.build.yml b/.github/workflows/.build.yml
index 79e5fe30..a920a73c 100644
--- a/.github/workflows/.build.yml
+++ b/.github/workflows/.build.yml
@@ -109,7 +109,7 @@ jobs:
             core.info(`git_tag: ${gitTag}`);
 
   image:
-    uses: docker/github-builder/.github/workflows/bake.yml@5f637c833aa76bc99372a1dc9a6f8bcd8056fb85 # v1.12.0
+    uses: docker/github-builder/.github/workflows/bake.yml@c4a1b216d96a8c85b45a9974b37857828274c808 # v1.13.0
     needs:
       - prepare-build
     permissions:
@@ -150,7 +150,7 @@ jobs:
           scope: ${{ needs.prepare-build.outputs.image_name }}@push
 
   qemu-archive:
-    uses: docker/github-builder/.github/workflows/bake.yml@5f637c833aa76bc99372a1dc9a6f8bcd8056fb85 # v1.12.0
+    uses: docker/github-builder/.github/workflows/bake.yml@c4a1b216d96a8c85b45a9974b37857828274c808 # v1.13.0
     if: inputs.target == 'mainline'
     permissions:
       contents: read # to checkout the repo
@@ -207,7 +207,7 @@ jobs:
           if-no-files-found: error
 
   binfmt-archive:
-    uses: docker/github-builder/.github/workflows/bake.yml@5f637c833aa76bc99372a1dc9a6f8bcd8056fb85 # v1.12.0
+    uses: docker/github-builder/.github/workflows/bake.yml@c4a1b216d96a8c85b45a9974b37857828274c808 # v1.13.0
     if: inputs.target == 'mainline'
     permissions:
       contents: read # to checkout the repo