diff --git a/.github/workflows/promote-latest.yml b/.github/workflows/promote-latest.yml
index 5fae46c..2aeed18 100644
--- a/.github/workflows/promote-latest.yml
+++ b/.github/workflows/promote-latest.yml
@@ -231,7 +231,7 @@ jobs:
 
       - name: Configure AWS credentials (OIDC → customers account)
         if: steps.guard.outputs.needed == 'true'
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           role-to-assume: ${{ vars.IMAGE_PROMOTER_LATEST_ROLE_ARN }}
           aws-region: ${{ env.AWS_REGION }}
diff --git a/.github/workflows/publish-testing.yml b/.github/workflows/publish-testing.yml
index 38093a5..b72a428 100644
--- a/.github/workflows/publish-testing.yml
+++ b/.github/workflows/publish-testing.yml
@@ -320,7 +320,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Configure AWS credentials (OIDC → customers account)
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           role-to-assume: ${{ vars.IMAGE_PROMOTER_TESTING_ROLE_ARN }}
           aws-region: ${{ env.AWS_REGION }}