diff --git a/workflow-templates/cdk-deploy.yml b/workflow-templates/cdk-deploy.yml
index e397b29..0bab2cc 100644
--- a/workflow-templates/cdk-deploy.yml
+++ b/workflow-templates/cdk-deploy.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Matches local dev (Node 24 / npm 11, lockfileVersion 3). This is also the
       # reusable workflow's default — passed explicitly to pin against drift.
diff --git a/workflow-templates/ci-dotnet.yml b/workflow-templates/ci-dotnet.yml
index 8187158..64eb84c 100644
--- a/workflow-templates/ci-dotnet.yml
+++ b/workflow-templates/ci-dotnet.yml
@@ -12,4 +12,4 @@ jobs:
     # Every input is optional. Common overrides: `solution` (defaults to *.sln
     # in the working directory), `working-directory`, and `dotnet-version`
     # (defaults to 8.0.x). This reusable has no `node-version` input.
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
diff --git a/workflow-templates/ci-mobile-ios.yml b/workflow-templates/ci-mobile-ios.yml
index 1d14365..67e883a 100644
--- a/workflow-templates/ci-mobile-ios.yml
+++ b/workflow-templates/ci-mobile-ios.yml
@@ -8,7 +8,7 @@ jobs:
   ci:
     # Job id MUST stay `ci`: the reusable's aggregator job is also `ci`, so the
     # check context resolves to the required `ci / ci`.
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-mobile-ios.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-mobile-ios.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Matches local dev (Node 24 / npm 11, lockfileVersion 3). This is also
       # the reusable workflow's default — passed explicitly to pin against drift.
diff --git a/workflow-templates/ci-node.yml b/workflow-templates/ci-node.yml
index 7fa8645..2448f0b 100644
--- a/workflow-templates/ci-node.yml
+++ b/workflow-templates/ci-node.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Matches local dev (Node 24 / npm 11, lockfileVersion 3). This is also the
       # reusable workflow's default — passed explicitly to pin against drift.
diff --git a/workflow-templates/ci-python-app.yml b/workflow-templates/ci-python-app.yml
index d087cba..5a47f38 100644
--- a/workflow-templates/ci-python-app.yml
+++ b/workflow-templates/ci-python-app.yml
@@ -12,4 +12,4 @@ jobs:
     # Every input is optional. Common overrides: `source-dirs` (ruff targets),
     # `requirements` (non-default requirements file), `subproject-dir` (a
     # self-contained suite that must run in its own working directory).
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
diff --git a/workflow-templates/ci-python.yml b/workflow-templates/ci-python.yml
index 5e124e2..93c7b4e 100644
--- a/workflow-templates/ci-python.yml
+++ b/workflow-templates/ci-python.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       run-tests: true
       # ci-python-sam.yaml declares a `node-version` input (default "24") that
diff --git a/workflow-templates/ci-static.yml b/workflow-templates/ci-static.yml
index b49d647..95eb033 100644
--- a/workflow-templates/ci-static.yml
+++ b/workflow-templates/ci-static.yml
@@ -8,7 +8,7 @@ jobs:
   ci:
     # Job id MUST stay `ci`: the reusable's job is also `ci`, so the check
     # context resolves to the required `ci / ci`.
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Pinned explicitly (handbook): local dev is Node 24 / npm 11, which
       # generates lockfileVersion 3. Being explicit avoids lockfile drift.
diff --git a/workflow-templates/ci-typescript-frontend.yml b/workflow-templates/ci-typescript-frontend.yml
index dbd4030..52b6e82 100644
--- a/workflow-templates/ci-typescript-frontend.yml
+++ b/workflow-templates/ci-typescript-frontend.yml
@@ -8,7 +8,7 @@ jobs:
   ci:
     # Job id MUST stay `ci`: the reusable's job is also `ci`, so the check
     # context resolves to the required `ci / ci`.
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-frontend.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Pinned explicitly (handbook): local dev is Node 24 / npm 11, which
       # generates lockfileVersion 3. Being explicit avoids lockfile drift.
diff --git a/workflow-templates/dependency-review.yml b/workflow-templates/dependency-review.yml
index d2c2dd0..35a141e 100644
--- a/workflow-templates/dependency-review.yml
+++ b/workflow-templates/dependency-review.yml
@@ -8,4 +8,4 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
diff --git a/workflow-templates/dotnet-eb-deploy.yml b/workflow-templates/dotnet-eb-deploy.yml
index af8353f..779f9c5 100644
--- a/workflow-templates/dotnet-eb-deploy.yml
+++ b/workflow-templates/dotnet-eb-deploy.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-dotnet-eb.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-dotnet-eb.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Required: the project to publish, relative to the repo root.
       project: REPLACE-ME-project-csproj
diff --git a/workflow-templates/labeler.yml b/workflow-templates/labeler.yml
index 40fe473..2846103 100644
--- a/workflow-templates/labeler.yml
+++ b/workflow-templates/labeler.yml
@@ -13,4 +13,4 @@ permissions:
 
 jobs:
   label:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
diff --git a/workflow-templates/mobile-ios-deploy.yml b/workflow-templates/mobile-ios-deploy.yml
index fc4466a..face70c 100644
--- a/workflow-templates/mobile-ios-deploy.yml
+++ b/workflow-templates/mobile-ios-deploy.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-mobile-ios.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Pinned explicitly (handbook): local dev is Node 24 / npm 11, which
       # generates lockfileVersion 3. Being explicit avoids lockfile drift.
diff --git a/workflow-templates/release.yml b/workflow-templates/release.yml
index 14256fe..ee27816 100644
--- a/workflow-templates/release.yml
+++ b/workflow-templates/release.yml
@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   release:
-    uses: Sea-Haven-Industries/.github/.github/workflows/release.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/release.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       version: ${{ inputs.version }}
       # Tags in this org are v-prefixed MAJOR.MINOR.PATCH; "v" is the default
diff --git a/workflow-templates/sam-deploy.yml b/workflow-templates/sam-deploy.yml
index 01a7c15..a7a310d 100644
--- a/workflow-templates/sam-deploy.yml
+++ b/workflow-templates/sam-deploy.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@4a6cbfd362140a68810f0f46d338026863b8e827 # v1.0.10
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml@9781774f04b824b1182ff41638687f1c01c04361 # v1.0.11
     with:
       # Required: the CloudFormation stack name (kebab-case, matches repo name).
       # NOTE: this is a literal placeholder on purpose — starter-workflow variables