diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c1a8590..4b0fd2d 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,6 +27,6 @@ jobs:
       security-events: write # upload the SARIF to the Security tab
       contents: read
       actions: read
-    uses: cosyte/.github/.github/workflows/codeql.yml@498c7c13c8869bf11b67fa8324684ec2dc691ec6 # workflows-2026-11-07-498c7c13c886
+    uses: cosyte/.github/.github/workflows/codeql.yml@c0db8d8e5927269820de4401b3b5ad6141854b76 # workflows-2026-11-08-c0db8d8e5927
     with:
       languages: '["actions", "javascript-typescript"]'
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index e94b3ef..244e258 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -22,4 +22,4 @@ jobs:
   pr-title:
     permissions:
       contents: read
-    uses: cosyte/.github/.github/workflows/pr-title.yml@498c7c13c8869bf11b67fa8324684ec2dc691ec6 # workflows-2026-11-07-498c7c13c886
+    uses: cosyte/.github/.github/workflows/pr-title.yml@c0db8d8e5927269820de4401b3b5ad6141854b76 # workflows-2026-11-08-c0db8d8e5927
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index d17aae6..57a5027 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -20,4 +20,4 @@ jobs:
       contents: read # required to resolve the reusable workflow (else contents:none and a startup failure)
       security-events: write # upload the SARIF to the Security tab
       id-token: write # publish results to the OpenSSF API (for the badge)
-    uses: cosyte/.github/.github/workflows/scorecard.yml@498c7c13c8869bf11b67fa8324684ec2dc691ec6 # workflows-2026-11-07-498c7c13c886
+    uses: cosyte/.github/.github/workflows/scorecard.yml@c0db8d8e5927269820de4401b3b5ad6141854b76 # workflows-2026-11-08-c0db8d8e5927