diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9f0f3a95cf..aa04737b85 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
       # QEMU is required to build cross platform docker images using buildx.
       # It allows virtualization of the CPU architecture at the application level.
       - name: Set up QEMU dependency
-        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
 
       # Pin Docker to 28.0.4 because Docker 29.x changed how buildx pushes
       # images (they become manifest lists), which breaks goreleaser's