diff --git a/.github/actions/bootstrap/action.yml b/.github/actions/bootstrap/action.yml
index 914872a3..e0af8969 100644
--- a/.github/actions/bootstrap/action.yml
+++ b/.github/actions/bootstrap/action.yml
@@ -12,7 +12,7 @@ runs:
   using: "composite"
   steps:
 
-    - uses: actions/setup-go@v6
+    - uses: actions/setup-go@v7
       with:
         go-version-file: 'go.mod'
 
@@ -23,7 +23,7 @@ runs:
 
     - name: Set up Docker Buildx
       if: "${{ inputs.goreleaser == 'true' }}"
-      uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c
+      uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e
 
     # See https://goreleaser.com/blog/supply-chain-security/
     - name: installs syft for generating the SBOM with goreleaser