diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 761fe32d..8773eac7 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   auto-merge:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index b0652d7d..371dc551 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index bece160d..380da7b9 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   integration-tests:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-integration-tests.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     with:
       report-name: integration-tests
       maven-args-input: |
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index e1022951..40eef404 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   build:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
diff --git a/.github/workflows/pr-agent.yml b/.github/workflows/pr-agent.yml
index f91d2222..47a5dd6c 100644
--- a/.github/workflows/pr-agent.yml
+++ b/.github/workflows/pr-agent.yml
@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-pr-agent-review.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     # Map only what the reviewer needs. `secrets: inherit` would hand it every secret this
     # repo can see (GPG keys, Sonatype credentials, SONAR_TOKEN, …) for no reason; these two
     # are the whole requirement, because Vertex AI is reached keylessly.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 75b9a825..a72b27ff 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
   release:
     permissions:
       contents: write
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     secrets:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 3ad9c108..f9d2b4af 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@baf31841ab596ad200a8360d2f969b1f4bf889ef # v0.16.1
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@15376a1902e0dbe50a43127de9943a28e7f3c8fd # v0.17.0
     permissions:
       security-events: write
       id-token: write