diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2fbe436..e728dce 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,4 +13,4 @@ jobs:
     # root `pytest --collect-only` import check. This is code hygiene for THIS repo's
     # own source (run_headless.py et al.), not a security gate over other repos. The
     # aggregator job (keyed `ci`) emits the org-required `ci / ci` check.
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml@af0f002e14a08cdbfd879c1183bfe7eb2604bce9 # v1.0.8
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 09793af..5cae84e 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -7,4 +7,4 @@ permissions:
 
 jobs:
   review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@af0f002e14a08cdbfd879c1183bfe7eb2604bce9 # v1.0.8
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index cf781d1..9cc2bc4 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -14,4 +14,4 @@ permissions:
 
 jobs:
   label:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@af0f002e14a08cdbfd879c1183bfe7eb2604bce9 # v1.0.8