diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 61640d1..1f8d66e 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   auto-merge:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index b9a9972..3034f7c 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 91194d0..52e6e1c 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   integration-tests:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     with:
       report-name: integration-tests
       maven-args-input: |
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index e150cb3..701181d 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   build:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index 0db59a4..5cdb6cc 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     # Map only what the reviewer needs. `secrets: inherit` would hand it every secret this
     # repo can see (GPG keys, Sonatype credentials, SONAR_TOKEN, …) for no reason; these two
     # are the whole requirement, because Vertex AI is reached keylessly.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f533b93..19bc044 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
   release:
     permissions:
       contents: write
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     secrets:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index e65154b..10ba972 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@ab447694b019d30edc56f2ff7c5100ba731ca590 # v0.15.3
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@b42917c5ac86d3c6cff290b3107b384c3d1a6fb2 # v0.15.4
     permissions:
       security-events: write
       id-token: write