diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index a3cd46c3..d1caa9bc 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -97,7 +97,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - name: Setup repository and tools
-      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@2045fb6e6cb00ab099280625b6989cf62ccc1b77 # v2.7.0
+      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@d21b387fa6a35e48f78985a1e636ec728866981e # v2.8.0
       with:
         current_fetch_depth: 1
         current_git_ref: ${{ github.head_ref }}
diff --git a/.github/workflows/release-sweep.yaml b/.github/workflows/release-sweep.yaml
index 257394d0..70e78378 100644
--- a/.github/workflows/release-sweep.yaml
+++ b/.github/workflows/release-sweep.yaml
@@ -44,7 +44,7 @@ jobs:
         fetch-depth: 0
         persist-credentials: false
     - name: Sweep release pull requests
-      uses: ppat/homelab-ops-actions/actions/release-sweep@2045fb6e6cb00ab099280625b6989cf62ccc1b77 # v2.7.0
+      uses: ppat/homelab-ops-actions/actions/release-sweep@d21b387fa6a35e48f78985a1e636ec728866981e # v2.8.0
       with:
         # Pull requests touching this file run only the built-in read token; the monthly
         # schedule supplies the App token needed for an authorized, live merge.
diff --git a/.github/workflows/test-template.yaml b/.github/workflows/test-template.yaml
index 53ec7d3a..4abc07d4 100644
--- a/.github/workflows/test-template.yaml
+++ b/.github/workflows/test-template.yaml
@@ -35,7 +35,7 @@ jobs:
       # reference below) and, with no mise_toml override, installs straight from
       # current/mise.toml - the same `opentofu` pin the authoring toolchain uses
       # locally, so there's no second version string to drift from it.
-      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@2045fb6e6cb00ab099280625b6989cf62ccc1b77 # v2.7.0
+      uses: ppat/homelab-ops-actions/actions/setup-repository-tools@d21b387fa6a35e48f78985a1e636ec728866981e # v2.8.0
       with:
         current_git_ref: ${{ github.head_ref || github.ref }}
         current_repository: ${{ github.repository }}