diff --git a/.github/workflows/package-caller.yml b/.github/workflows/package-caller.yml
index d533464..639e1d2 100644
--- a/.github/workflows/package-caller.yml
+++ b/.github/workflows/package-caller.yml
@@ -29,4 +29,4 @@ jobs:
     # A caller grants every permission the callable file declares, and no more.
     permissions:
       contents: read
-    uses: ./.github/workflows/package.yml
+    uses: $/.github/workflows/package.yml
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7511af0..4d21b96 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -73,7 +73,7 @@ jobs:
     # A caller grants every permission the callable file declares, and no more.
     permissions:
       contents: read
-    uses: ./.github/workflows/package.yml
+    uses: $/.github/workflows/package.yml
 
   publish:
     name: Publish the release
diff --git a/pins.json b/pins.json
index 17cd3a9..c567c4b 100644
--- a/pins.json
+++ b/pins.json
@@ -13,7 +13,7 @@
     "id": "zizmor",
     "registry": "pypi",
     "name": "zizmor",
-    "version": "1.29.0",
+    "version": "1.30.0",
     "checksum": "",
     "reads": [".github/workflows/zizmor.yml"],
     "repeats": [],
@@ -23,7 +23,7 @@
     "id": "semgrep",
     "registry": "pypi",
     "name": "semgrep",
-    "version": "1.174.0",
+    "version": "1.176.0",
     "checksum": "",
     "reads": [".github/workflows/semgrep.yml"],
     "repeats": [],