diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index dca7583..9469a78 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
       # entier est refuse au demarrage, comme ci-dessus.
       packages: read
     name: Test
-    uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@340c925168b2688fee08cff1a28bd3bf53754501 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ci-node.yml@e89ec1209ae561a7a1b910127ccbd926e77fa613 # main
     with:
       enable-sonar: true
       install-args: ''
@@ -48,7 +48,7 @@ jobs:
     permissions:
       contents: write
       id-token: write
-    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@340c925168b2688fee08cff1a28bd3bf53754501 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@e89ec1209ae561a7a1b910127ccbd926e77fa613 # main
     with:
       dry-run: ${{ inputs.dry_run || false }}
     secrets: inherit
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index 5abf1dc..935e524 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -18,6 +18,6 @@ permissions:
 jobs:
   title:
     name: PR title
-    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@340c925168b2688fee08cff1a28bd3bf53754501 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-pr-title.yml@e89ec1209ae561a7a1b910127ccbd926e77fa613 # main
     with:
       runner: ubuntu-latest
diff --git a/.github/workflows/renovate-rebase.yml b/.github/workflows/renovate-rebase.yml
index 4f1303e..f908705 100644
--- a/.github/workflows/renovate-rebase.yml
+++ b/.github/workflows/renovate-rebase.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   dispatch:
-    uses: FerrLabs/.github/.github/workflows/reusable-renovate-dispatch.yml@340c925168b2688fee08cff1a28bd3bf53754501 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-renovate-dispatch.yml@e89ec1209ae561a7a1b910127ccbd926e77fa613 # main
     with:
       # This repo is public, so the job cannot use the default `ferrlabs-k8s`
       # runner: that group sets `allows_public_repositories=false`, which is
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 965df04..b63f306 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -16,5 +16,5 @@ permissions:
 jobs:
   scan:
     name: Secrets + CVE
-    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@340c925168b2688fee08cff1a28bd3bf53754501 # main
+    uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@e89ec1209ae561a7a1b910127ccbd926e77fa613 # main
     secrets: inherit