diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index d9d81f203..148b6f605 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -11,5 +11,5 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     secrets: inherit
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
index 3ac34a7ba..d296f54a9 100644
--- a/.github/workflows/bump-release.yml
+++ b/.github/workflows/bump-release.yml
@@ -32,7 +32,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     with:
       bump-type: ${{ inputs.bump-type }}
       tag-message-title: ${{ inputs.tag-message-title }}
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4438eda04..96a207f66 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,5 +18,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     secrets: inherit
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
index 950025cc1..5281d6732 100644
--- a/.github/workflows/contributors.yml
+++ b/.github/workflows/contributors.yml
@@ -14,5 +14,5 @@ jobs:
     permissions:
       pull-requests: write
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     secrets: inherit
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
index a3fb3b241..71cdf3ee5 100644
--- a/.github/workflows/go-test.yml
+++ b/.github/workflows/go-test.yml
@@ -13,7 +13,7 @@ on:
 
 jobs:
   test:
-    uses: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     with:
       extra-flags: '-tags testcgo,testcolorized' # (1) this is to trigger extra tests in spew, (2) this is to enable integration test for colorized output
     secrets: inherit
diff --git a/.github/workflows/monitor-bot-pr.yml b/.github/workflows/monitor-bot-pr.yml
index 280aff342..201ed284a 100644
--- a/.github/workflows/monitor-bot-pr.yml
+++ b/.github/workflows/monitor-bot-pr.yml
@@ -14,5 +14,5 @@ jobs:
       contents: write
       pull-requests: write
       statuses: read
-    uses: go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     secrets: inherit
diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml
index 27f47cd51..d57ba706b 100644
--- a/.github/workflows/scanner.yml
+++ b/.github/workflows/scanner.yml
@@ -15,5 +15,5 @@ jobs:
     permissions:
       contents: read
       security-events: write
-    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     secrets: inherit
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
index 698cfd453..5506c1bd8 100644
--- a/.github/workflows/tag-release.yml
+++ b/.github/workflows/tag-release.yml
@@ -13,7 +13,7 @@ jobs:
     name: Create release
     permissions:
       contents: write
-    uses: go-openapi/ci-workflows/.github/workflows/release.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/release.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     with:
       tag: ${{ github.ref_name }}
       is-monorepo: true
diff --git a/.github/workflows/webhook-announcements.yml b/.github/workflows/webhook-announcements.yml
index 62068c6b5..26dc05168 100644
--- a/.github/workflows/webhook-announcements.yml
+++ b/.github/workflows/webhook-announcements.yml
@@ -50,7 +50,7 @@ on:
 
 jobs:
   announce:
-    uses: go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml@befbc52f24215555cb601b0d824b2987c1d49d0b # v0.4.3
+    uses: go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml@d87ca69d0f0464d70cdece61c88919725a3571a2 # v0.4.4
     with:
       scanned-markdown: README.md
       # On push: normal before..after diff (empty