diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 9cd828c02..18137fef9 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -110,7 +110,7 @@ jobs:
       # https://github.com/docker/metadata-action
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # 5.8.0
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # 5.9.0
         with:
           # Auto-discovery is based on docker image name.
           # That’s why the Redis docker image needs to be named exactly `redis`