diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 33eadb38..1a6247b7 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -33,7 +33,7 @@ jobs:
       # No push on PRs — build-only validation. GITHUB_TOKEN is enough for GHCR.
       - name: Log in to GHCR
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}