diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
index b11c75d..aebfd3e 100644
--- a/.github/workflows/add-to-project.yaml
+++ b/.github/workflows/add-to-project.yaml
@@ -33,7 +33,7 @@ permissions: {}
 
 jobs:
   add:
-    uses: bitwise-media-group/github-workflows/.github/workflows/add-to-project.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/add-to-project.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       project-url: https://github.com/orgs/bitwise-media-group/projects/1
       app-client-id: ${{ vars.ADD_TO_PROJECT_CLIENT_ID }}
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 7164fad..5b8e950 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -23,7 +23,7 @@ permissions:
 
 jobs:
   ci:
-    uses: bitwise-media-group/github-workflows/.github/workflows/ci.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/ci.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       # nothing to unit-test here (no test task), so skip the Codecov upload
       coverage: false
diff --git a/.github/workflows/merge-notice.yaml b/.github/workflows/merge-notice.yaml
index 52dee80..2c1d5c9 100644
--- a/.github/workflows/merge-notice.yaml
+++ b/.github/workflows/merge-notice.yaml
@@ -23,6 +23,6 @@ permissions:
 
 jobs:
   notice:
-    uses: bitwise-media-group/github-workflows/.github/workflows/merge-notice.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/merge-notice.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       pr-number: ${{ github.event.pull_request.number }}
diff --git a/.github/workflows/merge-review-ack.yaml b/.github/workflows/merge-review-ack.yaml
index 0bb4afe..7a07838 100644
--- a/.github/workflows/merge-review-ack.yaml
+++ b/.github/workflows/merge-review-ack.yaml
@@ -25,4 +25,4 @@ permissions: {}
 
 jobs:
   ack:
-    uses: bitwise-media-group/github-workflows/.github/workflows/merge-review-ack.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/merge-review-ack.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
diff --git a/.github/workflows/merge.yaml b/.github/workflows/merge.yaml
index bc48098..8bd1d96 100644
--- a/.github/workflows/merge.yaml
+++ b/.github/workflows/merge.yaml
@@ -51,7 +51,7 @@ permissions: {}
 
 jobs:
   merge:
-    uses: bitwise-media-group/github-workflows/.github/workflows/merge.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/merge.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       app-client-id: ${{ vars.FF_MERGE_CLIENT_ID }}
     secrets:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8a0779d..ce4587c 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -51,7 +51,7 @@ permissions:
 
 jobs:
   release:
-    uses: bitwise-media-group/github-workflows/.github/workflows/release.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/release.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       # author the release PR as the FF Merge App so it can auto-merge (a
       # GITHUB_TOKEN-authored push fires no workflow_run to trigger the merge)
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index ac0c4f7..a3d0ed5 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -59,7 +59,7 @@ permissions: {}
 
 jobs:
   renovate:
-    uses: bitwise-media-group/github-workflows/.github/workflows/renovate.yaml@fea4c5284a9d3679c64f0e2cac5810124e0294d2 # v7.0.0
+    uses: bitwise-media-group/github-workflows/.github/workflows/renovate.yaml@2d3b2608662b272b8e5036236e82144507d8bb67 # v7.0.1
     with:
       app-client-id: ${{ vars.RENOVATE_CLIENT_ID }}
       dry-run: ${{ inputs.dry-run || '' }}