diff --git a/.github/workflows/_local-not-for-reuse-ci.yml b/.github/workflows/_local-not-for-reuse-ci.yml
index c4efacb3..d65f9fb9 100644
--- a/.github/workflows/_local-not-for-reuse-ci.yml
+++ b/.github/workflows/_local-not-for-reuse-ci.yml
@@ -17,7 +17,7 @@ permissions:
 jobs:
   ci:
     name: Run CI Pipeline
-    uses: SocketDev/socket-registry/.github/workflows/ci.yml@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+    uses: SocketDev/socket-registry/.github/workflows/ci.yml@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
     with:
       fail-fast: false
       lint-script: 'pnpm run lint --all'
@@ -39,11 +39,11 @@ jobs:
           autocrlf: false
           persist-credentials: false
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
         with:
           node-version: 22
 
-      - uses: SocketDev/socket-registry/.github/actions/cache-npm-packages@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/cache-npm-packages@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
 
       - name: Build registry
         shell: bash
diff --git a/.github/workflows/_local-not-for-reuse-provenance.yml b/.github/workflows/_local-not-for-reuse-provenance.yml
index 89da0fc4..24e31e70 100644
--- a/.github/workflows/_local-not-for-reuse-provenance.yml
+++ b/.github/workflows/_local-not-for-reuse-provenance.yml
@@ -31,7 +31,7 @@ permissions:
 
 jobs:
   publish:
-    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
     with:
       debug: ${{ inputs.debug }}
       force-registry: ${{ inputs.force-registry }}
diff --git a/.github/workflows/_local-not-for-reuse-weekly-update.yml b/.github/workflows/_local-not-for-reuse-weekly-update.yml
index 7e60d0b6..f353d6e4 100644
--- a/.github/workflows/_local-not-for-reuse-weekly-update.yml
+++ b/.github/workflows/_local-not-for-reuse-weekly-update.yml
@@ -24,7 +24,7 @@ jobs:
     outputs:
       has-updates: ${{ steps.check.outputs.has-updates }}
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
 
       - name: Check for npm updates
         id: check
@@ -48,7 +48,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-and-install@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
         with:
           checkout-fetch-depth: '0'
 
@@ -62,7 +62,7 @@ jobs:
           git checkout -b "$BRANCH_NAME"
           echo "branch=$BRANCH_NAME" >> $GITHUB_OUTPUT
 
-      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/setup-git-signing@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
         with:
           gpg-private-key: ${{ secrets.BOT_GPG_PRIVATE_KEY }}
 
@@ -268,7 +268,7 @@ jobs:
             test-output.log
           retention-days: 7
 
-      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@da519693b701861bc0f9690a30f50af1a1dcd49c # main
+      - uses: SocketDev/socket-registry/.github/actions/cleanup-git-signing@8d54162f37b88ef2970a892b6c619b7c064f0c23 # main
         if: always()
 
   notify: