diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 386d8d11..9c428f52 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -30,4 +30,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/ci.yaml@f6bc6a84a5948e6b47914d5e3a81940cd2bce6e5 # v3
+    uses: cplieger/ci/.github/workflows/ci.yaml@37d8edbe68e40e89598b9ad14a6ebb01cf46faec # v3
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index b5dad4f9..328c77d9 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,4 +25,4 @@ jobs:
       security-events: write
       contents: read
       actions: read
-    uses: cplieger/ci/.github/workflows/codeql.yaml@f6bc6a84a5948e6b47914d5e3a81940cd2bce6e5 # v3
+    uses: cplieger/ci/.github/workflows/codeql.yaml@37d8edbe68e40e89598b9ad14a6ebb01cf46faec # v3
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0e982aaa..255b424a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -52,7 +52,7 @@ jobs:
       id-token: write
       attestations: write
       security-events: write
-    uses: cplieger/ci/.github/workflows/release.yaml@f6bc6a84a5948e6b47914d5e3a81940cd2bce6e5 # v3
+    uses: cplieger/ci/.github/workflows/release.yaml@37d8edbe68e40e89598b9ad14a6ebb01cf46faec # v3
     # Forward only the two Docker Hub publish credentials the reusable pipeline
     # actually declares and consumes, rather than `secrets: inherit` (which
     # exposes every repo secret to the reusable-workflow trust boundary). Both
@@ -71,7 +71,7 @@ jobs:
       actions: read
       contents: read
       issues: write
-    uses: cplieger/ci/.github/workflows/notify-failure.yaml@f6bc6a84a5948e6b47914d5e3a81940cd2bce6e5 # v3
+    uses: cplieger/ci/.github/workflows/notify-failure.yaml@37d8edbe68e40e89598b9ad14a6ebb01cf46faec # v3
     with:
       workflow: ${{ github.workflow }}
       run-url: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 5e3df306..c9bbb9a0 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -28,4 +28,4 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: cplieger/ci/.github/workflows/security-scan.yaml@f6bc6a84a5948e6b47914d5e3a81940cd2bce6e5 # v3
+    uses: cplieger/ci/.github/workflows/security-scan.yaml@37d8edbe68e40e89598b9ad14a6ebb01cf46faec # v3