diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 5c1f83f..70ebf23 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -219,7 +219,7 @@ jobs:
 
       - name: Detect relevant lanes
         id: detect
-        uses: melodic-software/ci-workflows/.github/actions/change-detection@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/change-detection@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
         with:
           filters: ${{ inputs.filters }}
 
@@ -228,54 +228,54 @@ jobs:
         if: ${{ inputs.typos && fromJSON(steps.detect.outputs.results || '{}')['typos'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/typos@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/typos@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Scan for secrets
         id: gitleaks
         if: ${{ inputs.gitleaks && fromJSON(steps.detect.outputs.results || '{}')['gitleaks'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/gitleaks@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/gitleaks@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Check editorconfig conformance
         id: editorconfig
         if: ${{ inputs.editorconfig && fromJSON(steps.detect.outputs.results || '{}')['editorconfig'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/editorconfig@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/editorconfig@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Lint markdown
         id: markdown
         if: ${{ inputs.markdown && fromJSON(steps.detect.outputs.results || '{}')['markdown'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/markdown@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/markdown@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Lint shell scripts
         id: shellcheck
         if: ${{ inputs.shellcheck && fromJSON(steps.detect.outputs.results || '{}')['shellcheck'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/shellcheck@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/shellcheck@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Lint workflows
         id: actionlint
         if: ${{ inputs.actionlint && fromJSON(steps.detect.outputs.results || '{}')['actionlint'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/actionlint@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/actionlint@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Verify shebang files are executable
         id: exec_bit
         if: ${{ inputs.exec-bit && fromJSON(steps.detect.outputs.results || '{}')['exec-bit'] != 'false' }}
         continue-on-error: true
-        uses: melodic-software/ci-workflows/.github/actions/exec-bit@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/exec-bit@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Check for machine-specific paths
         id: machine_specific_paths
         if: ${{ inputs.machine-specific-paths && fromJSON(steps.detect.outputs.results || '{}')['machine-specific-paths'] != 'false' }}
         continue-on-error: true
-        uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
         with:
           exclude: ${{ inputs.machine-specific-paths-exclude }}
 
@@ -283,13 +283,13 @@ jobs:
         id: eol_renormalize
         if: ${{ inputs.eol-renormalize && fromJSON(steps.detect.outputs.results || '{}')['eol-renormalize'] != 'false' }}
         continue-on-error: true
-        uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Scan comment hygiene
         id: comment_hygiene
         if: ${{ inputs.comment-hygiene && fromJSON(steps.detect.outputs.results || '{}')['comment-hygiene'] != 'false' }}
         continue-on-error: true
-        uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
         with:
           exclude: ${{ inputs.comment-hygiene-exclude }}
 
@@ -298,7 +298,7 @@ jobs:
         if: ${{ inputs.lychee-offline && fromJSON(steps.detect.outputs.results || '{}')['lychee-offline'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/lychee-offline@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/lychee-offline@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
 
       - name: Validate against JSON Schema
         id: check_jsonschema
@@ -309,7 +309,7 @@ jobs:
         if: ${{ inputs.check-jsonschema && inputs.check-jsonschema-files != '' && fromJSON(steps.detect.outputs.results || '{}')['check-jsonschema'] != 'false' }}
         continue-on-error: true
         timeout-minutes: 8
-        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0
         with:
           files: ${{ inputs.check-jsonschema-files }}
           builtin-schema: ${{ inputs.check-jsonschema-builtin-schema }}
diff --git a/.github/workflows/issue-triage-label-self.yml b/.github/workflows/issue-triage-label-self.yml
index 19f843e..0fcc9a2 100644
--- a/.github/workflows/issue-triage-label-self.yml
+++ b/.github/workflows/issue-triage-label-self.yml
@@ -19,4 +19,4 @@ jobs:
   issue-triage-label:
     permissions:
       issues: write # Downgraded to exactly what the called reusable needs.
-    uses: melodic-software/ci-workflows/.github/workflows/issue-triage-label.yml@906ae7ef379ea4d2b8497f64475dce1d3d8715c4 # v0.22.0
+    uses: melodic-software/ci-workflows/.github/workflows/issue-triage-label.yml@541ee4e90d12d77a90a3ddd72a3af9bc78634ea7 # v0.23.0