diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 43e8bc5..a1260bb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
       contents: read
       pull-requests: write
     name: CI
-    uses: FerrLabs/.github/.github/workflows/reusable-ci-rust.yml@dc37316d0b31cb7a47455f2933202533f9c909bd # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ci-rust.yml@6a248c75b2a72155c0573bc9f82567c6506a1a9b # main
     with:
       enable-sonar: true
       cargo-flags: --workspace --all-features
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index d66e577..8d53146 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -10,4 +10,4 @@ permissions:
 jobs:
   title:
     name: PR title
-    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@dc37316d0b31cb7a47455f2933202533f9c909bd # main
+    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@6a248c75b2a72155c0573bc9f82567c6506a1a9b # main
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6b41617..c6f49dd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ concurrency:
 
 jobs:
   release:
-    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@dc37316d0b31cb7a47455f2933202533f9c909bd # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@6a248c75b2a72155c0573bc9f82567c6506a1a9b # main
     with:
       dry-run: ${{ inputs.dry_run || false }}
       # ferrflow.json sets deferPublish: true — publish runs as a separate,
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 9d9f8d2..6a56454 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -16,5 +16,5 @@ permissions:
 jobs:
   scan:
     name: Secrets + CVE
-    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@dc37316d0b31cb7a47455f2933202533f9c909bd # main
+    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@6a248c75b2a72155c0573bc9f82567c6506a1a9b # main
     secrets: inherit