From b66cfdace7166af59e46dd750b0a558ca13da199 Mon Sep 17 00:00:00 2001
From: cuioss-release-bot <action@github.com>
Date: Wed, 7 Oct 2026 16:35:53 +0000
Subject: [PATCH] chore: update cuioss-organization workflows to v0.37.0

---
 .github/workflows/cuioss-review-bot.yml     | 2 +-
 .github/workflows/dependabot-auto-merge.yml | 2 +-
 .github/workflows/dependency-review.yml     | 2 +-
 .github/workflows/maven.yml                 | 2 +-
 .github/workflows/release.yml               | 2 +-
 .github/workflows/scorecards.yml            | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/cuioss-review-bot.yml b/.github/workflows/cuioss-review-bot.yml
index de18970..8934909 100644
--- a/.github/workflows/cuioss-review-bot.yml
+++ b/.github/workflows/cuioss-review-bot.yml
@@ -43,7 +43,7 @@ permissions:
 
 jobs:
   review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-cuioss-review-bot.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-cuioss-review-bot.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     # Map only what the reviewer needs. `secrets: inherit` would hand it every caller secret
     # (GPG keys, Sonatype credentials, SONAR_TOKEN, …) for no reason; these two are the whole
     # requirement, because Vertex AI is reached keylessly.
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 7eaf930..2defe3c 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   auto-merge:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 88c7472..5a3b909 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 38d577f..c812c5b 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -19,7 +19,7 @@ permissions:
 
 jobs:
   build:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     secrets:
       SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
       OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fdd92c8..b7919e6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,7 +38,7 @@ jobs:
       (github.event_name != 'pull_request' || github.event.pull_request.merged == true)
     permissions:
       contents: write
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     secrets:
       RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
       RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index f347d64..4183e78 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -13,7 +13,7 @@ permissions:
 
 jobs:
   analysis:
-    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@b2de4107d3d53a41a7edab7e2513887c309b8237 # v0.36.0
+    uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@bf0f1305123c16521d9fdcf2a9474e3cdb981caa # v0.37.0
     permissions:
       security-events: write
       id-token: write