diff --git a/.github/workflows/esr.yml b/.github/workflows/esr.yml
index f15de684..bec26b4e 100644
--- a/.github/workflows/esr.yml
+++ b/.github/workflows/esr.yml
@@ -20,7 +20,7 @@ on:
 jobs:
   esr:
     name: Create ESR branch and tag
-    uses: balena-os/github-workflows/.github/workflows/esr.yml@6fdae9ec102bb2deaa0bd767155687fafd538436 # master
+    uses: balena-os/github-workflows/.github/workflows/esr.yml@84d01a24c04dd1a1e4f0acc92ddb87c44844ed6b # master
     secrets: inherit
     with:
       esr-version: ${{ github.event.inputs.esr-version }}
diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml
index 9d819508..ac46dde4 100644
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@@ -16,7 +16,7 @@ on:
 jobs:
   flowzone:
     name: Flowzone
-    uses: product-os/flowzone/.github/workflows/flowzone.yml@3b69c8f20fbd2f43b5fcedb31373d7c45e86948e # master
+    uses: product-os/flowzone/.github/workflows/flowzone.yml@575536963d71e7546a6347d10aff4ef017cf6a88 # master
     # prevent duplicate workflow executions for pull_request and pull_request_target
     if: |
       (