diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 918a1581..6b46eca2 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -97,7 +97,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - name: Setup repository and tools
-      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@f66c9acb40309305e0e1fd3179406b85647aa54c # v2.3.2
+      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@26cdd23c133bd8db2f408be4c6ef225509d6e8c4 # v2.5.0
       with:
         current_fetch_depth: 1
         current_git_ref: ${{ github.head_ref }}
diff --git a/.github/workflows/release-sweep.yaml b/.github/workflows/release-sweep.yaml
index 3fe25092..0fb9bd8c 100644
--- a/.github/workflows/release-sweep.yaml
+++ b/.github/workflows/release-sweep.yaml
@@ -44,7 +44,7 @@ jobs:
         fetch-depth: 0
         persist-credentials: false
     - name: Sweep release pull requests
-      uses: ppat/homelab-ops-actions/actions/release-sweep@f66c9acb40309305e0e1fd3179406b85647aa54c # v2.3.2
+      uses: ppat/homelab-ops-actions/actions/release-sweep@26cdd23c133bd8db2f408be4c6ef225509d6e8c4 # v2.5.0
       with:
         # Pull requests touching this file run only the built-in read token; the monthly
         # schedule supplies the App token needed for an authorized, live merge.
diff --git a/.github/workflows/test-template.yaml b/.github/workflows/test-template.yaml
index 88f845d2..23943ac6 100644
--- a/.github/workflows/test-template.yaml
+++ b/.github/workflows/test-template.yaml
@@ -33,7 +33,7 @@ jobs:
       # reference below) and, with no mise_toml override, installs straight from
       # current/mise.toml - the same `opentofu` pin the authoring toolchain uses
       # locally, so there's no second version string to drift from it.
-      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@f66c9acb40309305e0e1fd3179406b85647aa54c # v2.3.2
+      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@26cdd23c133bd8db2f408be4c6ef225509d6e8c4 # v2.5.0
       with:
         current_git_ref: ${{ github.head_ref || github.ref }}
         current_repository: ${{ github.repository }}