From 87b9ebcc6d21dbeba42e913b90761b1594d438f6 Mon Sep 17 00:00:00 2001
From: cuioss-release-bot <action@github.com>
Date: Thu, 19 Feb 2026 07:09:10 +0000
Subject: [PATCH] chore: update cuioss-organization workflows to v0.4.0

---
 .github/workflows/dependency-review.yml | 2 +-
 .github/workflows/maven.yml             | 2 +-
 .github/workflows/release.yml           | 2 +-
 .github/workflows/scorecards.yml        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 5fff978..6980c11 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -9,7 +9,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@89ce95e04b1e15076b0c8d78d8112fa432d9d162 # v0.3.11
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@7f9eecb85e04771d0dacfe2b102fd094558eff1d # v0.4.0
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 4d9ea52..ad41471 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -16,7 +16,7 @@ jobs:
     # Run on push events, OR on pull_request only if from a fork
     # This prevents duplicate runs: push handles internal branches, PR handles forks
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@89ce95e04b1e15076b0c8d78d8112fa432d9d162 # v0.3.11
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@7f9eecb85e04771d0dacfe2b102fd094558eff1d # v0.4.0
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c8c4228..ba163a3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
     permissions:
       contents: write
     if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@89ce95e04b1e15076b0c8d78d8112fa432d9d162 # v0.3.11
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@7f9eecb85e04771d0dacfe2b102fd094558eff1d # v0.4.0
     secrets:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index ba7ec92..6949654 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -12,7 +12,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@89ce95e04b1e15076b0c8d78d8112fa432d9d162 # v0.3.11
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@7f9eecb85e04771d0dacfe2b102fd094558eff1d # v0.4.0
     permissions:
       security-events: write
       id-token: write