diff --git a/.github/workflows/build-pkg.yml b/.github/workflows/build-pkg.yml
index 5fe46d65..2c592c6c 100644
--- a/.github/workflows/build-pkg.yml
+++ b/.github/workflows/build-pkg.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: classabbyamp/treeless-checkout-action@v1
+        uses: actions/checkout@v5
 
       - name: Get image release
         id: release
@@ -29,7 +29,7 @@ jobs:
 
       - name: Docker metadata
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: |
             ghcr.io/${{ github.repository_owner }}/infra-${{ inputs.service_name }}
@@ -47,14 +47,14 @@ jobs:
             org.opencontainers.image.description=infrastructure image for ${{ inputs.service_name }} based on Void Linux
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Login to GCHR
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -62,8 +62,9 @@ jobs:
 
       - name: Build and push images
         id: build_and_push
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v6
         with:
+          source: .
           push: ${{ github.event_name != 'pull_request' }}
           targets: infra-${{ inputs.service_name }}
           files: |