diff --git a/.github/workflows/ai-issue-implementation.yml b/.github/workflows/ai-issue-implementation.yml
index a3472f0a1..605df05f8 100644
--- a/.github/workflows/ai-issue-implementation.yml
+++ b/.github/workflows/ai-issue-implementation.yml
@@ -21,7 +21,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-issue-implementation.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-issue-implementation.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       issue-number: ${{ inputs['issue-number'] || '' }}
     secrets: inherit
diff --git a/.github/workflows/ai-pr-review-address-continuation.yml b/.github/workflows/ai-pr-review-address-continuation.yml
index e2ed81500..89ccbffde 100644
--- a/.github/workflows/ai-pr-review-address-continuation.yml
+++ b/.github/workflows/ai-pr-review-address-continuation.yml
@@ -22,7 +22,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       source-run-id: >-
         ${{ format('{0}', github.event.workflow_run.id || '') }}
diff --git a/.github/workflows/ai-pr-review-address.yml b/.github/workflows/ai-pr-review-address.yml
index 0f6370f54..e1350896e 100644
--- a/.github/workflows/ai-pr-review-address.yml
+++ b/.github/workflows/ai-pr-review-address.yml
@@ -25,7 +25,7 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-work-item-resolver.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-work-item-resolver.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       work-scope: review
       upload-work-items: true
@@ -40,7 +40,7 @@ jobs:
       id-token: write
       issues: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review-address.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       pull-request-number: ${{ inputs['pull-request-number'] || '' }}
     secrets: inherit
diff --git a/.github/workflows/ai-pr-review.yml b/.github/workflows/ai-pr-review.yml
index 1be8d3ba9..39dc19fc1 100644
--- a/.github/workflows/ai-pr-review.yml
+++ b/.github/workflows/ai-pr-review.yml
@@ -18,7 +18,7 @@ jobs:
       contents: write
       id-token: write
       pull-requests: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       # CodeBuild-hosted runner in the Java testing account; the label must
       # match the CodeBuild project name.
diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index 2f43312c5..14fa3cb57 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -12,7 +12,7 @@ jobs:
       contents: read
       id-token: write
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       # CodeBuild-hosted runner in the Java testing account; the label must
       # match the CodeBuild project name.
diff --git a/.github/workflows/notify.yml b/.github/workflows/notify.yml
index 223673362..8da87f297 100644
--- a/.github/workflows/notify.yml
+++ b/.github/workflows/notify.yml
@@ -17,7 +17,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       # CodeBuild-hosted runner in the Java testing account; the label must
       # match the CodeBuild project name.
diff --git a/.github/workflows/stale-issue-closer.yml b/.github/workflows/stale-issue-closer.yml
index 242a05b78..3b58c301e 100644
--- a/.github/workflows/stale-issue-closer.yml
+++ b/.github/workflows/stale-issue-closer.yml
@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@288e4317948ca778ebf01acca9342d8b898a1dc2
+    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b # v0.4.0
     with:
       # CodeBuild-hosted runner in the Java testing account; the label must
       # match the CodeBuild project name.