diff --git a/.github/workflows/mise-update.yaml b/.github/workflows/mise-update.yaml
index 7ee8085..176e773 100644
--- a/.github/workflows/mise-update.yaml
+++ b/.github/workflows/mise-update.yaml
@@ -148,7 +148,7 @@ jobs:
           artifact-ids: ${{ needs.prepare-pr.outputs.artifact-id }}
           path: ${{ runner.temp }}/mise-pr
       - name: 🔀 Open the lockfile PR
-        uses: tox-dev/github-workflows/publish-post-release-pr@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/publish-post-release-pr@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         env:
           GH_TOKEN: ${{ steps.token.outputs.token }}
         with:
diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml
index e5debfc..c74e92a 100644
--- a/.github/workflows/news.yaml
+++ b/.github/workflows/news.yaml
@@ -27,9 +27,9 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-news
           venv: ${{ runner.temp }}/release-tools
       - name: 🔍 Validate news fragments
-        uses: tox-dev/github-workflows/validate-news@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/validate-news@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
diff --git a/.github/workflows/post-release.yaml b/.github/workflows/post-release.yaml
index d0c34da..9c51de5 100644
--- a/.github/workflows/post-release.yaml
+++ b/.github/workflows/post-release.yaml
@@ -108,7 +108,7 @@ jobs:
           artifact-ids: ${{ needs.post-release-prepare.outputs.artifact-id }}
           path: ${{ runner.temp }}/post-release
       - name: 🔀 Open the post-release PR
-        uses: tox-dev/github-workflows/publish-post-release-pr@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/publish-post-release-pr@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         env:
           GH_TOKEN: ${{ steps.token.outputs.token }}
         with:
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index b050fa0..77ae8c2 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -15,7 +15,7 @@ concurrency:
 jobs:
   prepare:
     name: 🏷️ Prepare Towncrier release
-    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
     permissions:
       contents: read
       pull-requests: read
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index efddca7..d08509a 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -28,12 +28,12 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-notes
           venv: ${{ runner.temp }}/release-tools
       - name: 📝 Render release notes
-        uses: tox-dev/github-workflows/render-release-notes@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/render-release-notes@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           tag: ${{ github.ref_name }}
           changelog: CHANGELOG.md
@@ -126,7 +126,7 @@ jobs:
           echo "path=${archives[0]}" >>"$GITHUB_OUTPUT"
       - name: ✍️ Sign verified plugin ZIP
         id: signed
-        uses: tox-dev/github-workflows/sign-jetbrains-plugin@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/sign-jetbrains-plugin@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           archive: ${{ steps.unsigned.outputs.path }}
           sha256: ${{ needs.build-unsigned.outputs.archive_sha }}
@@ -165,7 +165,7 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-notes
           venv: ${{ runner.temp }}/release-tools
@@ -224,7 +224,7 @@ jobs:
           if [[ "$channel" == "$version" ]]; then channel=''; fi
           echo "name=${channel%%.*}" >>"$GITHUB_OUTPUT"
       - name: 🚀 Publish signed ZIP
-        uses: tox-dev/github-workflows/publish-jetbrains-marketplace@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/publish-jetbrains-marketplace@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           archive: dist/${{ needs.sign.outputs.archive_name }}
           sha256: ${{ needs.sign.outputs.archive_sha }}
@@ -264,7 +264,7 @@ jobs:
           read -r digest _ < <(sha256sum "${archives[0]}")
           test "$digest" = "$EXPECTED_SHA"
       - name: 🚀 Publish GitHub release
-        uses: tox-dev/github-workflows/publish-github-release@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/publish-github-release@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         env:
           GH_TOKEN: ${{ github.token }}
         with:
diff --git a/.github/workflows/upgrade-release-tools.yaml b/.github/workflows/upgrade-release-tools.yaml
index 30430e2..0f9e208 100644
--- a/.github/workflows/upgrade-release-tools.yaml
+++ b/.github/workflows/upgrade-release-tools.yaml
@@ -10,7 +10,7 @@ concurrency:
 jobs:
   upgrade:
     name: 🔀 Upgrade release tools
-    uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+    uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
     permissions:
       contents: read
     secrets:
diff --git a/.github/workflows/verify-marketplace-release.yaml b/.github/workflows/verify-marketplace-release.yaml
index 35dad0a..9d4bf56 100644
--- a/.github/workflows/verify-marketplace-release.yaml
+++ b/.github/workflows/verify-marketplace-release.yaml
@@ -25,7 +25,7 @@ jobs:
           python-version: "3.15"
           enable-cache: false
       - name: 📦 Install locked release tools
-        uses: tox-dev/github-workflows/install-locked-tools@ddb6260e1d2ec52b6fe1bf0b008c2eb44780786c # 6.0.3
+        uses: tox-dev/github-workflows/install-locked-tools@29d4d5e6900db30502d7249043b59c18284a9777 # 6.2.0
         with:
           groups: release-notes
           venv: ${{ runner.temp }}/release-tools