diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 426919d..075adbc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -510,7 +510,7 @@ jobs:
         id: slack-summary
         # Pinned to a SHA — automatically updated by the update-self-refs job after each release.
         # GitHub Actions requires static `uses:` values, so we can't pin dynamically.
-        uses: docker/cagent-action@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
         with:
           agent: agentcatalog/github-action-release-notes
           prompt: |
diff --git a/.github/workflows/review-pr.yml b/.github/workflows/review-pr.yml
index aa7efd4..b6e26cf 100644
--- a/.github/workflows/review-pr.yml
+++ b/.github/workflows/review-pr.yml
@@ -88,7 +88,7 @@ jobs:
       comment-author-type: ${{ steps.read.outputs.comment-author-type }}
     steps:
       - name: Setup credentials
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Verify token for cross-run artifact download
         shell: bash
@@ -264,7 +264,7 @@ jobs:
         if: |
           steps.command.outputs.is_review != 'false' &&
           steps.draft.outputs.skip != 'true'
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Check if org member
         id: membership
@@ -326,7 +326,7 @@ jobs:
           steps.draft.outputs.skip != 'true'
         id: run-review
         continue-on-error: true
-        uses: docker/cagent-action/review-pr@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/review-pr@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
         with:
           pr-number: ${{ steps.pr.outputs.number }}
           comment-id: ${{ inputs.comment-id || github.event.comment.id }}
@@ -386,7 +386,7 @@ jobs:
 
       - name: Setup credentials
         if: inputs.trigger-run-id != ''
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Verify token for cross-run artifact download
         if: inputs.trigger-run-id != ''
@@ -505,7 +505,7 @@ jobs:
 
       - name: Setup credentials
         if: steps.check.outputs.is_agent == 'true'
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Check authorization
         if: steps.check.outputs.is_agent == 'true'
@@ -664,7 +664,7 @@ jobs:
       - name: Run reply
         if: steps.check.outputs.is_agent == 'true' && steps.auth.outputs.authorized == 'true'
         continue-on-error: true
-        uses: docker/cagent-action/review-pr/reply@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/review-pr/reply@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
         with:
           thread-context: ${{ steps.thread.outputs.prompt }}
           comment-id: ${{ steps.feedback.outputs.comment-id }}
@@ -739,7 +739,7 @@ jobs:
 
     steps:
       - name: Setup credentials
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Download trigger context
         if: inputs.trigger-run-id != ''
@@ -805,7 +805,7 @@ jobs:
       - name: Run mention-reply handler
         id: mention-context
         if: steps.resolve-event.outputs.path != ''
-        uses: docker/cagent-action/.github/actions/mention-reply@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/.github/actions/mention-reply@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
         env:
           GITHUB_EVENT_PATH: ${{ steps.resolve-event.outputs.path }}
           GITHUB_EVENT_NAME: ${{ steps.resolve-event.outputs.name }}
@@ -817,7 +817,7 @@ jobs:
         if: steps.mention-context.outputs.should-reply == 'true'
         id: run-reply
         continue-on-error: true
-        uses: docker/cagent-action/review-pr/mention-reply@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/review-pr/mention-reply@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
         with:
           mention-context: ${{ steps.mention-context.outputs.prompt }}
           anthropic-api-key: ${{ env.ANTHROPIC_API_KEY_FROM_SSM || secrets.ANTHROPIC_API_KEY }}
diff --git a/.github/workflows/self-review-pr.yml b/.github/workflows/self-review-pr.yml
index 437bfaf..477b42a 100644
--- a/.github/workflows/self-review-pr.yml
+++ b/.github/workflows/self-review-pr.yml
@@ -14,7 +14,7 @@ jobs:
     if: |
       github.event_name == 'issue_comment' ||
       github.event.workflow_run.conclusion == 'success'
-    uses: docker/cagent-action/.github/workflows/review-pr.yml@c22076b8856ee12d9b4c4685bb49cf26eb974079
+    uses: docker/cagent-action/.github/workflows/review-pr.yml@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
     permissions:
       contents: read # Read repository files and PR diffs
       pull-requests: write # Post review comments
diff --git a/.github/workflows/update-docker-agent-version.yml b/.github/workflows/update-docker-agent-version.yml
index 8155c6a..b29ffe0 100644
--- a/.github/workflows/update-docker-agent-version.yml
+++ b/.github/workflows/update-docker-agent-version.yml
@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Setup credentials
-        uses: docker/cagent-action/setup-credentials@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+        uses: docker/cagent-action/setup-credentials@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
 
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
diff --git a/review-pr/action.yml b/review-pr/action.yml
index fff0f35..af4bd2e 100644
--- a/review-pr/action.yml
+++ b/review-pr/action.yml
@@ -626,7 +626,7 @@ runs:
     - name: Process pending feedback
       if: steps.lock-check.outputs.skip != 'true' && steps.pending-feedback.outputs.has_feedback == 'true'
       continue-on-error: true
-      uses: docker/cagent-action@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+      uses: docker/cagent-action@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
@@ -740,7 +740,7 @@ runs:
     - name: Run PR Review
       if: steps.lock-check.outputs.skip != 'true'
       id: run-review
-      uses: docker/cagent-action@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+      uses: docker/cagent-action@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/mention-reply/action.yml b/review-pr/mention-reply/action.yml
index 0eee706..bb4d049 100644
--- a/review-pr/mention-reply/action.yml
+++ b/review-pr/mention-reply/action.yml
@@ -62,7 +62,7 @@ runs:
     - name: Run mention reply agent
       id: run-mention-reply
       continue-on-error: true
-      uses: docker/cagent-action@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+      uses: docker/cagent-action@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
       env:
         ACTION_PATH: ${{ github.action_path }}
       with:
diff --git a/review-pr/reply/action.yml b/review-pr/reply/action.yml
index d910db2..33cd0e6 100644
--- a/review-pr/reply/action.yml
+++ b/review-pr/reply/action.yml
@@ -73,7 +73,7 @@ runs:
     - name: Run reply agent
       id: run-reply
       continue-on-error: true
-      uses: docker/cagent-action@c22076b8856ee12d9b4c4685bb49cf26eb974079 # v1.5.0
+      uses: docker/cagent-action@0498757af1c50b084f763d626f571918cf317509 # v1.5.1
       env:
         ACTION_PATH: ${{ github.action_path }}
       with: