diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 5f6a3e93da..f926bb2291 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -10,7 +10,7 @@ permissions: {}
 
 jobs:
   test:
-    uses: ./.github/workflows/_test.yml
+    uses: $/.github/workflows/_test.yml
 
   build:
     name: Build
@@ -118,4 +118,4 @@ jobs:
         
         env:
           REF_NAME: ${{ github.ref_name }}
-          RELEASE_ID: ${{ needs.candidate_release.outputs.release_id }}
\ No newline at end of file
+          RELEASE_ID: ${{ needs.candidate_release.outputs.release_id }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9fc17c3a81..b5acdfa356 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,6 +12,6 @@ permissions: {}
 
 jobs:
   test:
-    uses: ./.github/workflows/_test.yml
+    uses: $/.github/workflows/_test.yml
   test-with-sslib-main:
-    uses: ./.github/workflows/_test_sslib_main.yml
+    uses: $/.github/workflows/_test_sslib_main.yml
diff --git a/requirements/lint.txt b/requirements/lint.txt
index c9a37ff63e..2a285efb60 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -6,9 +6,9 @@
 # Lint tools
 # (We are not so interested in the specific versions of the tools: the versions
 # are pinned to prevent unexpected linting failures when tools update)
-ruff==0.16.4
+ruff==0.16.5
 mypy==2.3.1
-zizmor==1.29.0
+zizmor==1.30.0
 
 # Required for type stubs
 freezegun==1.5.5
diff --git a/requirements/test.txt b/requirements/test.txt
index 59a97b8472..c789c20263 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -4,5 +4,5 @@
 -r pinned.txt
 
 # coverage measurement
-coverage[toml]==7.15.4
+coverage[toml]==7.16.0
 freezegun==1.5.5