diff --git a/.busbar-ref b/.busbar-ref
index 7a2df5d..b060b1a 100644
--- a/.busbar-ref
+++ b/.busbar-ref
@@ -1 +1 @@
-41fd7c5f386fa098890c031721f19bfca903f225 1.6.0
+276a156148703ed720f133ec8791df317a9c44dd 1.6.0
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c98dbb..c1b93a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,7 +29,7 @@ permissions:
 
 jobs:
   ci:
-    uses: GetBusbar/busbar/.github/workflows/plugin-ci.yml@41fd7c5f386fa098890c031721f19bfca903f225
+    uses: GetBusbar/busbar/.github/workflows/plugin-ci.yml@276a156148703ed720f133ec8791df317a9c44dd
     with:
       service: wiremock
       busbar_checkout: true
diff --git a/.github/workflows/consumer-verify.yml b/.github/workflows/consumer-verify.yml
index 40f8f81..01602c5 100644
--- a/.github/workflows/consumer-verify.yml
+++ b/.github/workflows/consumer-verify.yml
@@ -21,7 +21,7 @@ permissions:
 
 jobs:
   consumer:
-    uses: GetBusbar/busbar/.github/workflows/plugin-consumer-verify.yml@41fd7c5f386fa098890c031721f19bfca903f225
+    uses: GetBusbar/busbar/.github/workflows/plugin-consumer-verify.yml@276a156148703ed720f133ec8791df317a9c44dd
     with:
       version: ${{ inputs.version || '' }}
       asset_prefix: busbar-auth-github
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ba868d3..f106e50 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
     secrets: inherit
   release:
     needs: ci
-    uses: GetBusbar/busbar/.github/workflows/plugin-release.yml@41fd7c5f386fa098890c031721f19bfca903f225
+    uses: GetBusbar/busbar/.github/workflows/plugin-release.yml@276a156148703ed720f133ec8791df317a9c44dd
     with:
       plugin_crate: busbar-auth-github-plugin
       manifest_name: busbar-auth-github
@@ -42,7 +42,7 @@ jobs:
   consumer-verify:
     needs: release
     if: ${{ !cancelled() }}
-    uses: GetBusbar/busbar/.github/workflows/plugin-consumer-verify.yml@41fd7c5f386fa098890c031721f19bfca903f225
+    uses: GetBusbar/busbar/.github/workflows/plugin-consumer-verify.yml@276a156148703ed720f133ec8791df317a9c44dd
     with:
       version: ${{ github.ref_name }}
       asset_prefix: busbar-auth-github
diff --git a/.github/workflows/repin.yml b/.github/workflows/repin.yml
index 19d84b3..8dac433 100644
--- a/.github/workflows/repin.yml
+++ b/.github/workflows/repin.yml
@@ -28,7 +28,7 @@ permissions:
 
 jobs:
   repin:
-    uses: GetBusbar/busbar/.github/workflows/plugin-repin.yml@41fd7c5f386fa098890c031721f19bfca903f225
+    uses: GetBusbar/busbar/.github/workflows/plugin-repin.yml@276a156148703ed720f133ec8791df317a9c44dd
     with:
       busbar_sha: ${{ github.event.client_payload.sha || inputs.busbar_sha }}
       busbar_version: ${{ github.event.client_payload.version || inputs.busbar_version }}
diff --git a/Cargo.lock b/Cargo.lock
index 5714027..d8fd73d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -82,7 +82,7 @@ dependencies = [
 [[package]]
 name = "busbar-contract"
 version = "1.6.0"
-source = "git+https://www.github.com/GetBusbar/busbar?rev=41fd7c5f386fa098890c031721f19bfca903f225#41fd7c5f386fa098890c031721f19bfca903f225"
+source = "git+https://www.github.com/GetBusbar/busbar?rev=276a156148703ed720f133ec8791df317a9c44dd#276a156148703ed720f133ec8791df317a9c44dd"
 dependencies = [
  "async-trait",
  "base64",
@@ -105,7 +105,7 @@ dependencies = [
 [[package]]
 name = "busbar-plugin-loader"
 version = "1.5.0"
-source = "git+https://github.com/GetBusbar/busbar?rev=41fd7c5f386fa098890c031721f19bfca903f225#41fd7c5f386fa098890c031721f19bfca903f225"
+source = "git+https://github.com/GetBusbar/busbar?rev=276a156148703ed720f133ec8791df317a9c44dd#276a156148703ed720f133ec8791df317a9c44dd"
 dependencies = [
  "busbar-contract",
  "ed25519-dalek",
diff --git a/Cargo.toml b/Cargo.toml
index d20d548..5ffb6d6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,8 +10,8 @@
 # `.busbar-ref`; no sibling-checkout path dependency ships in any manifest.
 #
 # THIRD-PARTY VERSIONS ARE THE FLEET'S, NOT THIS REPO'S. The table below is busbar's own root
-# `[workspace.dependencies]` (third-party rows) at busbar 41fd7c5f386fa098890c031721f19bfca903f225, followed by the plugin-only rows
-# of busbar's `.github/fleet/deps.toml` at 41fd7c5f386fa098890c031721f19bfca903f225. A member takes a crate with
+# `[workspace.dependencies]` (third-party rows) at busbar 276a156148703ed720f133ec8791df317a9c44dd, followed by the plugin-only rows
+# of busbar's `.github/fleet/deps.toml` at 276a156148703ed720f133ec8791df317a9c44dd. A member takes a crate with
 # `{ workspace = true }` (adding features if it needs them); a crate in neither table is a new
 # `deps.toml` row in busbar first. CI holds this repo's Cargo.lock to busbar's lock at the pin.
 [workspace]
@@ -29,15 +29,15 @@ publish = false
 repository = "https://github.com/GetBusbar/busbar-auth-github"
 
 [workspace.dependencies]
-busbar-contract = { git = "https://github.com/GetBusbar/busbar", rev = "41fd7c5f386fa098890c031721f19bfca903f225" }
-busbar-plugin-loader = { git = "https://github.com/GetBusbar/busbar", rev = "41fd7c5f386fa098890c031721f19bfca903f225" }
+busbar-contract = { git = "https://github.com/GetBusbar/busbar", rev = "276a156148703ed720f133ec8791df317a9c44dd" }
+busbar-plugin-loader = { git = "https://github.com/GetBusbar/busbar", rev = "276a156148703ed720f133ec8791df317a9c44dd" }
 # THE SUITE'S HOST CONNECTOR (dev-only; auth-github-plugin/tests/support/conformance_host.rs,
 # rendered because the declares file states network needs): busbar's connector and its TLS
 # test kit at the pin, and the transport framers those needs name, at the revs busbar links.
-busbar-core-connector = { git = "https://github.com/GetBusbar/busbar", rev = "41fd7c5f386fa098890c031721f19bfca903f225", features = ["test-support"] }
+busbar-core-connector = { git = "https://github.com/GetBusbar/busbar", rev = "276a156148703ed720f133ec8791df317a9c44dd", features = ["test-support"] }
 busbar-transport-http = { git = "https://github.com/GetBusbar/busbar-transport-http", rev = "a715d1ab57dcec469930563da0c0509a4fb75289" }
 busbar-transport-tcp = { git = "https://github.com/GetBusbar/busbar-transport-tcp", rev = "eb334dd6e9d3dcd62ae1616f77a5ed56311b255a" }
-# busbar's root [workspace.dependencies], third-party rows, at 41fd7c5f386fa098890c031721f19bfca903f225
+# busbar's root [workspace.dependencies], third-party rows, at 276a156148703ed720f133ec8791df317a9c44dd
 a2a-lf = "0.3.0"
 a2a-pb = "0.2.0"
 aes = { version = "0.8", default-features = false }
@@ -114,7 +114,7 @@ url = "2"
 webpki = { package = "rustls-webpki", version = "0.103", default-features = false, features = ["std", "ring"] }
 webpki-roots = "1"
 zeroize = "1"
-# busbar .github/fleet/deps.toml [plugin-deps], at 41fd7c5f386fa098890c031721f19bfca903f225
+# busbar .github/fleet/deps.toml [plugin-deps], at 276a156148703ed720f133ec8791df317a9c44dd
 fallible-iterator = "0.2"
 ldap3 = { version = "0.12", default-features = false, features = ["sync"] }
 mysql = { version = "28", default-features = false, features = ["minimal-rust"] }
@@ -132,4 +132,4 @@ ulid = "1"
 # patches them to its own tree. The source is busbar spelled through www.github.com: Cargo
 # refuses a patch that names the source it patches.
 [patch."https://github.com/GetBusbar/busbar"]
-busbar-contract = { git = "https://www.github.com/GetBusbar/busbar", rev = "41fd7c5f386fa098890c031721f19bfca903f225" }
+busbar-contract = { git = "https://www.github.com/GetBusbar/busbar", rev = "276a156148703ed720f133ec8791df317a9c44dd" }
diff --git a/deny.toml b/deny.toml
index 1f57efe..10c7528 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,5 +1,5 @@
 # RENDERED by `busbar-release plugin heal` from GetBusbar/busbar-release template/ and busbar's
-# `.github/fleet/deps.toml` at 41fd7c5f386fa098890c031721f19bfca903f225; a hand edit is overwritten by the next sync. CI runs
+# `.github/fleet/deps.toml` at 276a156148703ed720f133ec8791df317a9c44dd; a hand edit is overwritten by the next sync. CI runs
 # `cargo deny check` on it (busbar's plugin-ci.yml at the pin). The license allowlist is busbar's own;
 # the one reviewed git source is busbar itself, at the pin.
 [graph]