diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml
index d6a756b..704fe06 100644
--- a/.github/workflows/build-docs.yml
+++ b/.github/workflows/build-docs.yml
@@ -15,4 +15,4 @@ permissions:
 
 jobs:
   build:
-    uses: reqstool/.github/.github/workflows/common-build-docs.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-build-docs.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 94eedc5..2b36d7e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -65,17 +65,17 @@ jobs:
               build/generated/sources/annotationProcessor/java/test/resources/annotations.yml | grep -v "^#"
           } > build/reqstool/annotations.yml
       - name: Install reqstool
-        uses: reqstool/.github/.github/actions/install-reqstool@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+        uses: reqstool/.github/.github/actions/install-reqstool@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
         with:
           reqstool-source: ${{ matrix.reqstool-source }}
       - name: Validate reqstool spec completeness
         # not yet available in the latest PyPI release
         if: matrix.reqstool-source == 'main'
-        uses: reqstool/.github/.github/actions/validate-reqstool@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+        uses: reqstool/.github/.github/actions/validate-reqstool@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
       - name: Run reqstool status
-        uses: reqstool/.github/.github/actions/reqstool-status@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+        uses: reqstool/.github/.github/actions/reqstool-status@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
         with:
           fail-if-incomplete: "true"
 
   validate-openspec:
-    uses: reqstool/.github/.github/workflows/common-validate-openspec.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-validate-openspec.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
diff --git a/.github/workflows/check-semantic-pr.yml b/.github/workflows/check-semantic-pr.yml
index 0599c3e..9971044 100644
--- a/.github/workflows/check-semantic-pr.yml
+++ b/.github/workflows/check-semantic-pr.yml
@@ -10,4 +10,4 @@ permissions:
 
 jobs:
   check:
-    uses: reqstool/.github/.github/workflows/common-check-semantic-pr.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-check-semantic-pr.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 27e318f..bed99ea 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -41,7 +41,7 @@ permissions:
 
 jobs:
   prepare:
-    uses: reqstool/.github/.github/workflows/common-release-prepare.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-release-prepare.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
     permissions:
       contents: read
     with:
@@ -67,7 +67,7 @@ jobs:
   tag:
     needs: [prepare, checks]
     if: ${{ !inputs.dry-run }}
-    uses: reqstool/.github/.github/workflows/common-release-tag.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-release-tag.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
     permissions:
       contents: write
     with:
@@ -80,7 +80,7 @@ jobs:
   # anything reaches the portal.
   publish-to-plugin-portal:
     needs: [prepare, tag]
-    uses: reqstool/.github/.github/workflows/java-publish-to-gradle.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/java-publish-to-gradle.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
     permissions:
       contents: read
     secrets: inherit
@@ -106,7 +106,7 @@ jobs:
   promote:
     needs: [prepare, publish-to-plugin-portal]
     if: ${{ !inputs.dry-run && !cancelled() && !contains(needs.*.result, 'failure') && !contains(needs.*.result, 'cancelled') }}
-    uses: reqstool/.github/.github/workflows/common-release-promote.yml@a4203a58cec87861655512b6b277a859db385796 # 1.1.0
+    uses: reqstool/.github/.github/workflows/common-release-promote.yml@47ea2f814efd0a4dd02bce2d9fd9d97725945cf6 # 1.2.0
     permissions:
       contents: write
     with: