diff --git a/Dockerfile b/Dockerfile
index c40addc..3b68e37 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -27,11 +27,11 @@ RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
 # Bake the bundle members at their RELEASE TAGS (both public — no build secrets).
 # The tags mirror protoagent.bundle.yaml's pins; bump both together (the manifest
 # is the source of truth, this bake is its image form).
-ARG GITHUB_PLUGIN_REF=v0.7.0
+ARG GITHUB_PLUGIN_REF=v0.7.1
 RUN git clone --depth 1 --branch "${GITHUB_PLUGIN_REF}" \
       https://github.com/protoLabsAI/github-plugin.git /opt/protoagent/plugins/github \
     && rm -rf /opt/protoagent/plugins/github/.git
-ARG PR_REVIEWER_PLUGIN_REF=v0.38.0
+ARG PR_REVIEWER_PLUGIN_REF=v0.39.0
 RUN git clone --depth 1 --branch "${PR_REVIEWER_PLUGIN_REF}" \
       https://github.com/protoLabsAI/pr-reviewer-plugin.git /opt/protoagent/plugins/pr-reviewer \
     && rm -rf /opt/protoagent/plugins/pr-reviewer/.git
diff --git a/README.md b/README.md
index ae3b493..7e2cec5 100644
--- a/README.md
+++ b/README.md
@@ -14,8 +14,8 @@ python -m server plugin install https://github.com/protoLabsAI/qaEngineer
 | Member | Pin | Role |
 |---|---|---|
 | `workflows` (builtin) | core | the recipe engine the review panels run on |
-| [github-plugin](https://github.com/protoLabsAI/github-plugin) | v0.7.0 | the verdict surface — formal Review API tools with CI-terminal + self-review guards inside the tools |
-| [pr-reviewer-plugin](https://github.com/protoLabsAI/pr-reviewer-plugin) | v0.38.0 | the machinery — webhook chokepoint, structural trigger, panel dispatch, evidence grounding, convergence, approve-on-green sweep, the `QA panel` check run, on-demand summon, telemetry + eval |
+| [github-plugin](https://github.com/protoLabsAI/github-plugin) | v0.7.1 | the verdict surface — formal Review API tools with CI-terminal + self-review guards inside the tools |
+| [pr-reviewer-plugin](https://github.com/protoLabsAI/pr-reviewer-plugin) | v0.39.0 | the machinery — webhook chokepoint, structural trigger, panel dispatch, evidence grounding, convergence, approve-on-green sweep, the `QA panel` check run, on-demand summon, telemetry + eval |
 
 Persona: [`SOUL.md`](./SOUL.md) (Vera — verdict system, three-layer verification, 80% bar,
 self-restriction), also inlined in the manifest's `archetype.soul` so the new-agent picker
diff --git a/protoagent.bundle.yaml b/protoagent.bundle.yaml
index 0c1f632..870af27 100644
--- a/protoagent.bundle.yaml
+++ b/protoagent.bundle.yaml
@@ -29,8 +29,8 @@ verified_against: 0.163.0
 
 plugins:
   - { id: workflows, builtin: true }   # the recipe engine (code-review panels run through it)
-  - { id: github, url: https://github.com/protoLabsAI/github-plugin, ref: v0.7.0 }
-  - { id: pr-reviewer, url: https://github.com/protoLabsAI/pr-reviewer-plugin, ref: v0.38.0 }
+  - { id: github, url: https://github.com/protoLabsAI/github-plugin, ref: v0.7.1 }
+  - { id: pr-reviewer, url: https://github.com/protoLabsAI/pr-reviewer-plugin, ref: v0.39.0 }
 
 enabled: [workflows, github, pr-reviewer]   # suggested turn-on list (applied to plugins.enabled)