diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 145aef7..6cf3a16 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -27,9 +27,9 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
         with:
           languages: python
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4
+        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index fabc400..832ae48 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -81,7 +81,7 @@ jobs:
 
   build:
     needs: [build-number, lint, test]
-    uses: chodeus/chodeus-ops/.github/workflows/docker-build.yml@579feb04e3219248963bd27843298a8c2ea6b2fd # main
+    uses: chodeus/chodeus-ops/.github/workflows/docker-build.yml@a08ae6259fdba04b2f97e846544e8afdb8bb36fd # main
     with:
       push: ${{ github.event_name != 'pull_request' }}
       build_args: |
@@ -94,7 +94,7 @@ jobs:
   notify-failure:
     needs: build
     if: failure() && github.event_name != 'pull_request'
-    uses: chodeus/chodeus-ops/.github/workflows/notify-discord.yml@579feb04e3219248963bd27843298a8c2ea6b2fd # main
+    uses: chodeus/chodeus-ops/.github/workflows/notify-discord.yml@a08ae6259fdba04b2f97e846544e8afdb8bb36fd # main
     with:
       event_type: build
       status: failure
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 39a0aa5..ca887c1 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   release:
-    uses: chodeus/chodeus-ops/.github/workflows/release-please.yml@579feb04e3219248963bd27843298a8c2ea6b2fd # main
+    uses: chodeus/chodeus-ops/.github/workflows/release-please.yml@a08ae6259fdba04b2f97e846544e8afdb8bb36fd # main
 
   # docker-publish.yml's tags:['v*'] trigger never fires: release-please pushes
   # its tag with GITHUB_TOKEN, and GitHub runs no workflow for events raised by
diff --git a/.github/workflows/repo-events.yml b/.github/workflows/repo-events.yml
index 66bf1ce..fdd6f36 100644
--- a/.github/workflows/repo-events.yml
+++ b/.github/workflows/repo-events.yml
@@ -16,5 +16,5 @@ on:
 
 jobs:
   notify:
-    uses: chodeus/chodeus-ops/.github/workflows/repo-events.yml@579feb04e3219248963bd27843298a8c2ea6b2fd # main
+    uses: chodeus/chodeus-ops/.github/workflows/repo-events.yml@a08ae6259fdba04b2f97e846544e8afdb8bb36fd # main
     secrets: inherit
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 60a8160..27be2ae 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -7,4 +7,4 @@ on:
 
 jobs:
   stale:
-    uses: chodeus/chodeus-ops/.github/workflows/stale-issues.yml@579feb04e3219248963bd27843298a8c2ea6b2fd # main
+    uses: chodeus/chodeus-ops/.github/workflows/stale-issues.yml@a08ae6259fdba04b2f97e846544e8afdb8bb36fd # main