diff --git a/.github/workflows/on-pr.yaml b/.github/workflows/on-pr.yaml
index e2246c8..7319df0 100644
--- a/.github/workflows/on-pr.yaml
+++ b/.github/workflows/on-pr.yaml
@@ -27,7 +27,7 @@ permissions:
 
 jobs:
   validate:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/validate.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/validate.yaml@v3.0.0
     with:
       examples: |
         [
@@ -38,10 +38,10 @@ jobs:
       error_on_missing_schemas: true
 
   test:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/test.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/test.yaml@v3.0.0
 
   e2e:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/e2e.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/e2e.yaml@v3.0.0
     with:
       timeout-minutes: 60
       cleanup-timeout-minutes: 30
@@ -57,7 +57,7 @@ jobs:
       - validate
       - test
       - e2e
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/publish.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/publish.yaml@v3.0.0
     secrets: inherit
     with:
       tag: pr-${{ github.event.pull_request.number }}-${{ github.sha }}
diff --git a/.github/workflows/on-push-main.yaml b/.github/workflows/on-push-main.yaml
index 3607f92..d1cd4ef 100644
--- a/.github/workflows/on-push-main.yaml
+++ b/.github/workflows/on-push-main.yaml
@@ -23,7 +23,7 @@ permissions:
 
 jobs:
   validate:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/validate.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/validate.yaml@v3.0.0
     with:
       examples: |
         [
@@ -34,10 +34,10 @@ jobs:
       error_on_missing_schemas: true
 
   test:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/test.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/test.yaml@v3.0.0
 
   e2e:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/e2e.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/e2e.yaml@v3.0.0
     with:
       # Knative + Istio Ambient + Gateway API teardown is heavy. Mirror the
       # aws-observe pattern: KnativeStack manifests cleanup runs first, then
diff --git a/.github/workflows/on-version-tagged.yaml b/.github/workflows/on-version-tagged.yaml
index dcb4f53..0b027b1 100644
--- a/.github/workflows/on-version-tagged.yaml
+++ b/.github/workflows/on-version-tagged.yaml
@@ -13,7 +13,7 @@ permissions:
 jobs:
 
   publish:
-    uses: unbounded-tech/workflows-crossplane/.github/workflows/publish.yaml@v2.20.0
+    uses: unbounded-tech/workflows-crossplane/.github/workflows/publish.yaml@v3.0.0
     secrets: inherit
     with:
       tag: ${{ github.ref_name }}