diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 54dab315b5..e3cb0f4c96 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
       # QEMU is required to build cross platform docker images using buildx.
       # It allows virtualization of the CPU architecture at the application level.
       - name: Set up QEMU dependency
-        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
 
       # Pin Docker to 28.0.4 because Docker 29.x changed how buildx pushes
       # images (they become manifest lists), which breaks goreleaser's