diff --git a/.github/workflows/curio-devnet-publish.yml b/.github/workflows/curio-devnet-publish.yml
index 4456cda61d32..b019e06cc626 100644
--- a/.github/workflows/curio-devnet-publish.yml
+++ b/.github/workflows/curio-devnet-publish.yml
@@ -35,7 +35,7 @@ jobs:
       # - date+sha, e.g. 2023-01-19-da4692d,
       - name: Docker Meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/chainsafe/curio-devnet
           tags: |
@@ -43,7 +43,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build image and push to GitHub Container Registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           build-args: |
             LOTUS_IMAGE=ghcr.io/chainsafe/lotus-devnet:2024-10-10-600728e
diff --git a/.github/workflows/docker-dev.yml b/.github/workflows/docker-dev.yml
index 0cedc4fc5dfa..a17b1b924e3d 100644
--- a/.github/workflows/docker-dev.yml
+++ b/.github/workflows/docker-dev.yml
@@ -23,7 +23,7 @@ jobs:
           ref: ${{ inputs.git_ref }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Github Packages
         uses: docker/login-action@v4
@@ -34,7 +34,7 @@ jobs:
 
       - name: Docker Meta fat for PRs only
         id: metafat
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/chainsafe/forest
           flavor: |
@@ -43,7 +43,7 @@ jobs:
             type=raw,value={{date 'YYYY-MM-DD'}}-{{sha}}-fat
 
       - name: Build fat image and push to GitHub Container Registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./Dockerfile
           tags: ${{ steps.metafat.outputs.tags }}
diff --git a/.github/workflows/docker-latest-tag.yml b/.github/workflows/docker-latest-tag.yml
index 27f6a8f0522b..d28392466c1c 100644
--- a/.github/workflows/docker-latest-tag.yml
+++ b/.github/workflows/docker-latest-tag.yml
@@ -33,7 +33,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Re-tag image and push to GHCR
         if: ${{ !fromJSON(github.event.inputs.dry_run) }}
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 2eeb488fd97b..b70b5eeb0d29 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -146,7 +146,7 @@ jobs:
           path: /tmp/forest/forest-linux-arm64
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to Github Packages
         uses: docker/login-action@v4
@@ -169,7 +169,7 @@ jobs:
       # - tag-fat (if pushed).
       - name: Docker Meta fat
         id: metafat
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/chainsafe/forest
           flavor: |
@@ -181,7 +181,7 @@ jobs:
             type=edge
 
       - name: Build fat image and push to GitHub Container Registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: /tmp/forest
           file: ./Dockerfile-ci
@@ -197,7 +197,7 @@ jobs:
       # - tag (if pushed).
       - name: Docker Meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/chainsafe/forest
           flavor: |
@@ -208,7 +208,7 @@ jobs:
             type=edge
 
       - name: Build slim image and push to GitHub Container Registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: /tmp/forest
           file: ./Dockerfile-ci
diff --git a/.github/workflows/lotus-devnet-publish.yml b/.github/workflows/lotus-devnet-publish.yml
index 2d7035ed051b..1f8aed8df191 100644
--- a/.github/workflows/lotus-devnet-publish.yml
+++ b/.github/workflows/lotus-devnet-publish.yml
@@ -35,7 +35,7 @@ jobs:
       # - date+sha, e.g. 2023-01-19-da4692d,
       - name: Docker Meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ghcr.io/chainsafe/lotus-devnet
           tags: |
@@ -43,7 +43,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build image and push to GitHub Container Registry
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           file: ./scripts/devnet/lotus.dockerfile
           context: ./scripts/devnet