diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml
index 28c6539..42ae412 100644
--- a/.github/workflows/review.yml
+++ b/.github/workflows/review.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   review:
-    uses: scality/workflows/.github/workflows/claude-code-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1
+    uses: scality/workflows/.github/workflows/claude-code-review.yml@f05282f5bd6d7e90e8536400cf468f0a54681a48 # v2.10.0
     secrets:
       GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
       GCP_SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT }}
@@ -21,7 +21,7 @@ jobs:
   review-dependency-bump:
     # pr.user.login catches dependabot PRs updated by a human, where github.actor is no longer dependabot[bot].
     if: github.event_name == 'pull_request_target' && (github.actor == 'dependabot[bot]' || github.event.pull_request.user.login == 'dependabot[bot]')
-    uses: scality/workflows/.github/workflows/claude-code-dependency-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1
+    uses: scality/workflows/.github/workflows/claude-code-dependency-review.yml@f05282f5bd6d7e90e8536400cf468f0a54681a48 # v2.10.0
     with:
       ACTIONS_APP_ID: ${{ vars.ACTIONS_APP_ID }}
     secrets: