diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 802c1d6..b4a887c 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -49,7 +49,7 @@ jobs:
             type=sha,format=long
 
       - name: Build & push (linux/arm64)
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           # Build context is frontend/ — the webapp is a self-contained npm app
           # (not a workspace), so npm ci resolves from frontend/package-lock.json.