diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 50e19a55..761fe32d 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   auto-merge:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 344e0819..b0652d7d 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 0244d9ce..bece160d 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   integration-tests:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     with:
       report-name: integration-tests
       maven-args-input: |
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 618443a9..e1022951 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   build:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index 57f455a5..f91d2222 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     # Map only what the reviewer needs. `secrets: inherit` would hand it every secret this
     # repo can see (GPG keys, Sonatype credentials, SONAR_TOKEN, …) for no reason; these two
     # are the whole requirement, because Vertex AI is reached keylessly.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bf747b90..75b9a825 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
   release:
     permissions:
       contents: write
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     secrets:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index aac57e0d..3ad9c108 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@e750788f3f5c718d945dc504fab4975bbb705404 # v0.16.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
     permissions:
       security-events: write
       id-token: write