diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 512eec1..ea960d9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
       contents: read
       pull-requests: write
     name: CI
-    uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@39502a0fbaa351acb517c0113136c199f5e16e14 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
     with:
       build-paths: ./cmd/...
       enable-sonar: true
diff --git a/.github/workflows/dco.yml b/.github/workflows/dco.yml
index b7e4d0f..a63a996 100644
--- a/.github/workflows/dco.yml
+++ b/.github/workflows/dco.yml
@@ -9,4 +9,4 @@ permissions:
 
 jobs:
   sign-off:
-    uses: FerrLabs/.github/.github/workflows/reusable-dco.yml@7c847412991e70d60745c2a1c78ca76583cb397a # main
+    uses: FerrLabs/.github/.github/workflows/reusable-dco.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
diff --git a/.github/workflows/mcp-ci.yml b/.github/workflows/mcp-ci.yml
index 049a3af..fac01d6 100644
--- a/.github/workflows/mcp-ci.yml
+++ b/.github/workflows/mcp-ci.yml
@@ -24,7 +24,7 @@ jobs:
       pull-requests: write
       packages: read
     name: Test
-    uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@9796e976e6b1a071578aed08b164fb483bf01a86 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
     with:
       working-directory: mcp
       node-version: "24"
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index 51033c2..020cff5 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -10,6 +10,6 @@ permissions:
 jobs:
   title:
     name: PR title
-    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@39502a0fbaa351acb517c0113136c199f5e16e14 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
     with:
       runner: ubuntu-latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e2895c1..c474a0e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ concurrency:
 
 jobs:
   release:
-    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@9796e976e6b1a071578aed08b164fb483bf01a86 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
     with:
       dry-run: ${{ inputs.dry_run || false }}
     secrets:
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index c5bed15..eaff86f 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -16,7 +16,7 @@ permissions:
 jobs:
   scan:
     name: Secrets + CVE
-    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@39502a0fbaa351acb517c0113136c199f5e16e14 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
     with:
       run-on-private: true
     secrets: inherit