diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
index caebe00..4c74a17 100644
--- a/.github/workflows/build-pr.yml
+++ b/.github/workflows/build-pr.yml
@@ -3,7 +3,7 @@ on: [pull_request]
 
 jobs:
   build:
-    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-build-pr.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-build-pr.yml@v2.5.0
     # Match the runtime LTS JDK (Temurin 25.0.3) used by the publish pipeline.
     with:
       java-version: "25.0.3"
diff --git a/.github/workflows/close_invalid_prs.yml b/.github/workflows/close_invalid_prs.yml
index 93962a7..867858a 100644
--- a/.github/workflows/close_invalid_prs.yml
+++ b/.github/workflows/close_invalid_prs.yml
@@ -5,6 +5,6 @@ on:
 
 jobs:
   close:
-    uses: OneLiteFeatherNET/workflows/.github/workflows/close-invalid-prs.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/close-invalid-prs.yml@v2.5.0
     with:
       protected-branch: main
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index c24016a..b313d9e 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -59,7 +59,7 @@ jobs:
   publish:
     needs: release-please
     if: needs.release-please.outputs.release_created == 'true'
-    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.5.0
     with:
       java-version: "25.0.3"
       java-distribution: "temurin"
@@ -68,7 +68,7 @@ jobs:
   publish-snapshot:
     needs: [release-please, version]
     if: needs.version.outputs.is_snapshot == 'true'
-    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-publish.yml@v2.5.0
     with:
       java-version: "25.0.3"
       java-distribution: "temurin"
@@ -84,7 +84,7 @@ jobs:
       always() &&
       ((github.event_name == 'push' && needs.release-please.outputs.release_created == 'true') ||
        github.event_name == 'workflow_dispatch')
-    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.5.0
     with:
       version: ${{ github.event_name == 'workflow_dispatch' && inputs.docker_version || needs.release-please.outputs.version }}
       gradle-command: "./gradlew jar optimizedBuildLayers optimizedDockerfile -Pversion=$VERSION"
@@ -102,7 +102,7 @@ jobs:
       always() && needs.build-context.result == 'success' &&
       ((github.event_name == 'push' && needs.release-please.outputs.release_created == 'true') ||
        github.event_name == 'workflow_dispatch')
-    uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.5.0
     with:
       image-name: "onelitefeather/otis"
       version: ${{ github.event_name == 'workflow_dispatch' && inputs.docker_version || needs.release-please.outputs.version }}
@@ -117,7 +117,7 @@ jobs:
     name: Build Docker context (snapshot)
     needs: [release-please, version]
     if: needs.version.outputs.is_snapshot == 'true'
-    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/gradle-docker-context.yml@v2.5.0
     with:
       version: ${{ needs.version.outputs.version }}
       gradle-command: "./gradlew jar optimizedBuildLayers optimizedDockerfile -Pversion=$VERSION"
@@ -132,7 +132,7 @@ jobs:
       contents: read
       id-token: write   # keyless cosign signing via GitHub OIDC
     if: needs.version.outputs.is_snapshot == 'true'
-    uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.4.0
+    uses: OneLiteFeatherNET/workflows/.github/workflows/docker-publish.yml@v2.5.0
     with:
       image-name: "onelitefeather/otis"
       version: ${{ needs.version.outputs.version }}