diff --git a/.devcontainer b/.devcontainer
index 264d5f3..1e6b8fb 160000
--- a/.devcontainer
+++ b/.devcontainer
@@ -1 +1 @@
-Subproject commit 264d5f3a982359a729abafe21056e1cfd5963223
+Subproject commit 1e6b8fb763e99fb0cb531b1d9bd2a88cd446c78d
diff --git a/.github/workflows/build.yml b/.github/workflows/xpbuild.yml
similarity index 96%
rename from .github/workflows/build.yml
rename to .github/workflows/xpbuild.yml
index 3b34b65..861392f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/xpbuild.yml
@@ -7,19 +7,19 @@ on:
   workflow_dispatch:
 jobs:
   linux:
-    uses: externpro/externpro/.github/workflows/build-linux.yml@25.04
+    uses: externpro/externpro/.github/workflows/build-linux.yml@25.05
     with:
       cmake-workflow-preset: LinuxRelease
       runon: ubuntu-latest
     secrets: inherit
   linux-arm64:
-    uses: externpro/externpro/.github/workflows/build-linux.yml@25.04
+    uses: externpro/externpro/.github/workflows/build-linux.yml@25.05
     with:
       cmake-workflow-preset: LinuxRelease
       runon: ubuntu-24.04-arm
     secrets: inherit
   windows:
-    uses: externpro/externpro/.github/workflows/build-windows.yml@25.04
+    uses: externpro/externpro/.github/workflows/build-windows.yml@25.05
     with:
       cmake-workflow-preset: WindowsRelease
     secrets: inherit
diff --git a/.github/workflows/release.yml b/.github/workflows/xprelease.yml
similarity index 84%
rename from .github/workflows/release.yml
rename to .github/workflows/xprelease.yml
index 6fa033b..5d9a5b3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/xprelease.yml
@@ -9,8 +9,12 @@ on:
 jobs:
   # Upload build artifacts as release assets
   release-from-build:
-    uses: externpro/externpro/.github/workflows/release-from-build.yml@25.04
+    uses: externpro/externpro/.github/workflows/release-from-build.yml@25.05
     with:
       workflow_run_url: ${{ github.event.inputs.workflow_run_url }}
       artifact_pattern: "*.tar.xz"
+    permissions:
+      contents: write
+      id-token: write
+      attestations: write
     secrets: inherit