diff --git a/.github/workflows/repo-ci.yml b/.github/workflows/repo-ci.yml
index ddd0b84..3c702cc 100644
--- a/.github/workflows/repo-ci.yml
+++ b/.github/workflows/repo-ci.yml
@@ -14,7 +14,7 @@ concurrency:
 jobs:
   ci:
     name: CI
-    uses: zemd/js/.github/workflows/shared-ci.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-ci.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/repo-release.yml b/.github/workflows/repo-release.yml
index 47f785d..ee1ab46 100644
--- a/.github/workflows/repo-release.yml
+++ b/.github/workflows/repo-release.yml
@@ -18,7 +18,7 @@ concurrency:
 jobs:
   release:
     name: Release
-    uses: zemd/js/.github/workflows/shared-release.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-release.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # check release state and pinned tooling
       id-token: write # npm trusted publishing (OIDC)
diff --git a/.github/workflows/repo-scorecard.yml b/.github/workflows/repo-scorecard.yml
index 0641918..2a85e68 100644
--- a/.github/workflows/repo-scorecard.yml
+++ b/.github/workflows/repo-scorecard.yml
@@ -17,7 +17,7 @@ concurrency:
 jobs:
   scorecard:
     name: Scorecard
-    uses: zemd/js/.github/workflows/shared-scorecard.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-scorecard.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # checkout the repository for analysis
       actions: read # inspect workflow runs for dangerous patterns
diff --git a/.github/workflows/repo-zizmor.yml b/.github/workflows/repo-zizmor.yml
index 729b84e..6966e05 100644
--- a/.github/workflows/repo-zizmor.yml
+++ b/.github/workflows/repo-zizmor.yml
@@ -21,6 +21,6 @@ concurrency:
 jobs:
   zizmor:
     name: zizmor
-    uses: zemd/js/.github/workflows/shared-zizmor.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-zizmor.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # checkout and online audits