diff --git a/.github/workflows/adapters.yml b/.github/workflows/adapters.yml
index 7050eb6d..cc584137 100644
--- a/.github/workflows/adapters.yml
+++ b/.github/workflows/adapters.yml
@@ -61,7 +61,7 @@ jobs:
           # builds fine and is wrong, so the report below would report on it.
           fetch-depth: 0
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0f62e534..26d1cb9e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -23,7 +23,7 @@ permissions:
 jobs:
   check:
     name: CI
-    uses: kirchDev/workflows/.github/workflows/_ci-check.yml@69bab03ff0e8b0ac3791cd6dbec97a4a8328c433 # v0.11.0
+    uses: kirchDev/workflows/.github/workflows/_ci-check.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     # THE REMOTE SOURCES, CACHED BETWEEN RUNS. A site reading other repositories
     # re-cloned every one of them on every pull request. The body restores and
     # saves the cache itself, because a job beside this call runs on another
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 44775274..4e0fe804 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,4 +28,4 @@ jobs:
       packages: read
       actions: read
       contents: read
-    uses: kirchDev/workflows/.github/workflows/_codeql.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_codeql.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 49db3be3..0b92b6e1 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -100,7 +100,7 @@ jobs:
           # clone gives every page the same commit date.
           fetch-depth: 0
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with:
@@ -304,7 +304,7 @@ jobs:
         with:
           ref: ${{ github.event_name == 'push' && github.sha || 'main' }}
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/fast-forward-queue.yml b/.github/workflows/fast-forward-queue.yml
index 068acec3..9ce3fa25 100644
--- a/.github/workflows/fast-forward-queue.yml
+++ b/.github/workflows/fast-forward-queue.yml
@@ -34,7 +34,7 @@ jobs:
       pull-requests: read
       checks: read
       statuses: read
-    uses: kirchDev/workflows/.github/workflows/_fast-forward-queue.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_fast-forward-queue.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     with:
       pr: ${{ inputs.pr }}
     secrets:
diff --git a/.github/workflows/prerender-bench.yml b/.github/workflows/prerender-bench.yml
index 2d99cb51..f5d9a5ea 100644
--- a/.github/workflows/prerender-bench.yml
+++ b/.github/workflows/prerender-bench.yml
@@ -78,7 +78,7 @@ jobs:
           # change the pages, and so the OG images, against a production build.
           fetch-depth: 0
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with:
diff --git a/.github/workflows/promotion-pr.yml b/.github/workflows/promotion-pr.yml
index a181b162..f1250e7a 100644
--- a/.github/workflows/promotion-pr.yml
+++ b/.github/workflows/promotion-pr.yml
@@ -18,4 +18,4 @@ permissions:
 jobs:
   promotion-pr:
     name: Promotion PR
-    uses: kirchDev/workflows/.github/workflows/_promotion-pr.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_promotion-pr.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
diff --git a/.github/workflows/queue-branch.yml b/.github/workflows/queue-branch.yml
index 05d8d827..25c9283e 100644
--- a/.github/workflows/queue-branch.yml
+++ b/.github/workflows/queue-branch.yml
@@ -20,6 +20,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: kirchDev/workflows/.github/workflows/_queue-branch.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_queue-branch.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     secrets:
       BWS_ACCESS_TOKEN: ${{ secrets.BWS_ACCESS_TOKEN }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 3ccdaee6..86fba1fa 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -42,7 +42,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: kirchDev/workflows/.github/workflows/_release-please.yml@1e57db95ff601f03ae87b78e329ef238f9d0cbf6 # v0.8.2
+    uses: kirchDev/workflows/.github/workflows/_release-please.yml@ea3a3c15385340fe1f9751e0afefaef32970aad7 # v0.12.0
     secrets:
       BWS_ACCESS_TOKEN: ${{ secrets.BWS_ACCESS_TOKEN }}
 
@@ -142,7 +142,7 @@ jobs:
         with:
           ref: ${{ matrix.package.tag }}
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with:
@@ -179,7 +179,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6
+      - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6
 
       - uses: actions/setup-node@v6
         with: