diff --git a/.github/workflows/build-all.yml b/.github/workflows/build-all.yml
index accc241..dd845cf 100644
--- a/.github/workflows/build-all.yml
+++ b/.github/workflows/build-all.yml
@@ -48,7 +48,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@bfd09aa3d6ede72e09a90766b6d90dca29bffb14 # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@12e9702f7a7025d34d8cd2147073e97ed2298775 # main
     with:
       ref: ${{ matrix.revision.ref }}
       build-args: ${{ matrix.revision.version != '' && format('IMPLEMENTATION_VERSION={0}', matrix.revision.version) || '' }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1d8cc9f..6a810db 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,7 +57,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@bfd09aa3d6ede72e09a90766b6d90dca29bffb14 # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@12e9702f7a7025d34d8cd2147073e97ed2298775 # main
     with:
       # Only publish from pushes to the default branch; PRs build & smoke only.
       publish: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
diff --git a/.github/workflows/dependabot-build.yml b/.github/workflows/dependabot-build.yml
index cbae959..4043514 100644
--- a/.github/workflows/dependabot-build.yml
+++ b/.github/workflows/dependabot-build.yml
@@ -36,7 +36,7 @@ jobs:
       attestations: write # needed for build provenance attestation
       packages: write # needed for pushing to ghcr.io
       artifact-metadata: write # needed for build provenance attestation
-    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@bfd09aa3d6ede72e09a90766b6d90dca29bffb14 # main
+    uses: bowtie-json-schema/bowtie/.github/workflows/harness-ci.yml@12e9702f7a7025d34d8cd2147073e97ed2298775 # main
     with:
       ref: ${{ github.event.workflow_run.head_sha }}
       publish: true