diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
index b4f2623..3745ccc 100644
--- a/.github/workflows/add-to-project.yaml
+++ b/.github/workflows/add-to-project.yaml
@@ -17,5 +17,5 @@ on:
 jobs:
   call-workflow-add-to-project:
     name: Call workflow to add issue to project
-    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8e573d3..551047a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -29,7 +29,7 @@ jobs:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync
@@ -44,7 +44,7 @@ jobs:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync --locked
diff --git a/.github/workflows/emergency-review-bypass.yaml b/.github/workflows/emergency-review-bypass.yaml
index 4c6034e..27f1c06 100644
--- a/.github/workflows/emergency-review-bypass.yaml
+++ b/.github/workflows/emergency-review-bypass.yaml
@@ -9,5 +9,5 @@ jobs:
   approve:
     name: Approve
     if: github.event.label.name == 'Emergency Bypass Review'
-    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit
diff --git a/.github/workflows/notify-approval-bypass.yaml b/.github/workflows/notify-approval-bypass.yaml
index 4f76f1a..9441a2e 100644
--- a/.github/workflows/notify-approval-bypass.yaml
+++ b/.github/workflows/notify-approval-bypass.yaml
@@ -1,8 +1,6 @@
 name: Approval bypass notifier
 on:
-  pull_request:
-    types:
-      - closed
+  push:
     branches:
       - main
 permissions:
@@ -10,5 +8,5 @@ permissions:
 jobs:
   notify:
     name: Notify
-    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
     secrets: inherit
diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml
index f11091c..03abedb 100644
--- a/.github/workflows/pr-title.yaml
+++ b/.github/workflows/pr-title.yaml
@@ -15,4 +15,4 @@ on:
       - synchronize
 jobs:
   lint:
-    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
+    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@b9f8cecd03b72609cd9d965bf0ee4d136eaf069d # main
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0132663..02d6818 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,7 +19,7 @@ jobs:
         run: |
           VERSION=${{github.head_ref}}
           echo "VERSION=${VERSION##*/}" >> $GITHUB_ENV
-      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
       - name: Build release
         run: |
           uv build