diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 49c4d5b..5f7d753 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -27,7 +27,7 @@ jobs:
       # Python and npm packages come through the estate's package proxy, which never serves a
       # version published less than 7 days ago (JorisJonkers-dev/workspace#167). A pull request
       # from a fork gets no secret, and then this step does nothing.
-      - uses: JorisJonkers-dev/github-workflows/actions/setup-package-proxy@8b5462a796f022647dfc44123ddb3655cc3c2f28 # v0.45.3
+      - uses: JorisJonkers-dev/github-workflows/actions/setup-package-proxy@2814b76fc3f5bd4f02a6e4a0fa789f1307757daa # v0.45.4
         with:
           require-package-proxy: true
           token: ${{ secrets.PACKAGES_PROXY_TOKEN }}
diff --git a/.github/workflows/repository-hygiene.yml b/.github/workflows/repository-hygiene.yml
index f485397..5b0a83e 100644
--- a/.github/workflows/repository-hygiene.yml
+++ b/.github/workflows/repository-hygiene.yml
@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   repository-hygiene:
-    uses: JorisJonkers-dev/github-workflows/.github/workflows/repository-hygiene-guard.yml@8b5462a796f022647dfc44123ddb3655cc3c2f28 # v0.45.3
+    uses: JorisJonkers-dev/github-workflows/.github/workflows/repository-hygiene-guard.yml@2814b76fc3f5bd4f02a6e4a0fa789f1307757daa # v0.45.4
     with:
       package-proxy-guard: enforce
     secrets: