diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 0fc2e60..1da2748 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -19,4 +19,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f31a5a4ba591d544b65f91f6d78b136e07756f0
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a
diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml
index b6c8083..1c6e9a8 100644
--- a/.github/workflows/hypatia-scan.yml
+++ b/.github/workflows/hypatia-scan.yml
@@ -25,4 +25,4 @@ permissions:
   security-events: write
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@cc58c0cb23f73fc2019ce85a56a468e5248a93b3
+    uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index ca494b2..9178a3d 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -14,5 +14,5 @@ permissions:
   contents: read
 jobs:
   mirror:
-    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a
     secrets: inherit
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 4f2f9c5..92c87a8 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -14,7 +14,7 @@ permissions:
   contents: read
 jobs:
   scorecard:
-    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8750b94ac1bbe8c51ad13fe106669b13478f0b62
+    uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a
     # Reusable called-workflow permissions are CAPPED by the caller's grants;
     # without security-events: write here the scorecard SARIF upload fails with
     # startup_failure (hypatia WF018). id-token: write enables OIDC publish.
diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index aa27b3c..d98e2b5 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -24,5 +24,5 @@ jobs:
     # caller must grant at least that or the run startup-fails.
     permissions:
       contents: read
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@11ba299dca221b6d4e970eeb58dd17ccbb825a9a
     secrets: inherit