diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 8be2703d3..27d0caa74 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -32,7 +32,7 @@ jobs:
     concurrency:
       group: claude-review-${{ github.repository }}
       queue: max
-    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@c136b27f404dd32ce3873f39a6f3443891d1c16e # v0.9.1
+    uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@e94438746c300b02385a7f8a2a2dcd19a7f4ad4a # v0.10.2
     with:
       runner: ubuntu-24.04
     # Pass only the one named secret (least privilege) rather than `secrets:
diff --git a/.github/workflows/claude-security-review.yml b/.github/workflows/claude-security-review.yml
index 923c8707f..65c80c181 100644
--- a/.github/workflows/claude-security-review.yml
+++ b/.github/workflows/claude-security-review.yml
@@ -31,7 +31,7 @@ jobs:
       contents: read         # checkout + read the diff
       pull-requests: write   # post the security review
       id-token: write        # OIDC — mints the Claude GitHub App token
-    uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@c136b27f404dd32ce3873f39a6f3443891d1c16e # v0.9.1
+    uses: melodic-software/ci-workflows/.github/workflows/claude-security-review.yml@e94438746c300b02385a7f8a2a2dcd19a7f4ad4a # v0.10.2
     with:
       runner: ubuntu-24.04
       paths-file: .github/claude-security-paths