diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9146f68..d3f6d85 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,4 +22,4 @@ permissions:
 jobs:
   check:
     name: CI
-    uses: kirchDev/workflows/.github/workflows/_ci-check.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_ci-check.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index be3566a..eef80e3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -24,4 +24,4 @@ jobs:
       packages: read
       actions: read
       contents: read
-    uses: kirchDev/workflows/.github/workflows/_codeql.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_codeql.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
diff --git a/.github/workflows/fast-forward-queue.yml b/.github/workflows/fast-forward-queue.yml
index 6a80dbc..b408826 100644
--- a/.github/workflows/fast-forward-queue.yml
+++ b/.github/workflows/fast-forward-queue.yml
@@ -26,7 +26,7 @@ jobs:
       pull-requests: read
       checks: read
       statuses: read
-    uses: kirchDev/workflows/.github/workflows/_fast-forward-queue.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_fast-forward-queue.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     with:
       pr: ${{ inputs.pr }}
     secrets:
diff --git a/.github/workflows/promotion-pr.yml b/.github/workflows/promotion-pr.yml
index 10a32bf..e3de839 100644
--- a/.github/workflows/promotion-pr.yml
+++ b/.github/workflows/promotion-pr.yml
@@ -15,4 +15,4 @@ permissions:
 jobs:
   promotion-pr:
     name: Promotion PR
-    uses: kirchDev/workflows/.github/workflows/_promotion-pr.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_promotion-pr.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
diff --git a/.github/workflows/queue-branch.yml b/.github/workflows/queue-branch.yml
index 40a8135..b3884b3 100644
--- a/.github/workflows/queue-branch.yml
+++ b/.github/workflows/queue-branch.yml
@@ -16,6 +16,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: kirchDev/workflows/.github/workflows/_queue-branch.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_queue-branch.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     secrets:
       BWS_ACCESS_TOKEN: ${{ secrets.BWS_ACCESS_TOKEN }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 62680cc..6817fa0 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -21,7 +21,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: kirchDev/workflows/.github/workflows/_release-please.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_release-please.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     with:
       # This repo is consumed as `kirchDev/coverage-report@<ref>`, so `@v0` has
       # to keep meaning "the newest v0.x.y".
@@ -39,7 +39,7 @@ jobs:
       # NPM_TOKEN exists in this repo; npm verifies this workflow against the
       # trusted publisher configured on the package.
       id-token: write
-    uses: kirchDev/workflows/.github/workflows/_publish-npm.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_publish-npm.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     with:
       tag-name: ${{ needs.release-please.outputs.tag-name }}
       # The npm artifact is lib/, built by build:npm — not the action bundle in
@@ -58,7 +58,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: kirchDev/workflows/.github/workflows/_publish-npm.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_publish-npm.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     with:
       prerelease: true
       build-script: build:npm