diff --git a/.github/workflows/pip-release.yml b/.github/workflows/pip-release.yml
index 99bab495..614f7bf7 100644
--- a/.github/workflows/pip-release.yml
+++ b/.github/workflows/pip-release.yml
@@ -82,7 +82,7 @@ jobs:
       # Linux aarch64 needs QEMU for cross-build on x86_64 runners.
       - name: Set up QEMU
         if: matrix.os == 'ubuntu-latest' && matrix.arch == 'aarch64'
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       # ADR-117 §5.4: abi3-py310 — one binary per OS/arch covers all
       # Python minor versions ≥ 3.10. Build only cp310 wheels.
diff --git a/.github/workflows/sensing-server-docker.yml b/.github/workflows/sensing-server-docker.yml
index 02b0c766..594ce299 100644
--- a/.github/workflows/sensing-server-docker.yml
+++ b/.github/workflows/sensing-server-docker.yml
@@ -56,7 +56,7 @@ jobs:
       # linux/arm64 layer below (Dockerfile.rust is arch-agnostic — no `--target`
       # flag — so buildx + QEMU is all that's needed; arm64 builds are emulated
       # by the runner, not built on a separate arm64 host).
-      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-qemu-action@v4
 
       - uses: docker/setup-buildx-action@v3