diff --git a/.github/workflows/deploy-mip-index-to-pages.yml b/.github/workflows/deploy-mip-index-to-pages.yml
index 7d89ecaae..6d0b4e839 100644
--- a/.github/workflows/deploy-mip-index-to-pages.yml
+++ b/.github/workflows/deploy-mip-index-to-pages.yml
@@ -26,7 +26,7 @@ env:
   # deploy, so an older tools ref here overwrites what a publication wrote.
   # 9aef8e68 predated the shared pydevices descriptions (.github 11a264c), and
   # every deploy put "PyDevices pydevices" back into the index (.github#50).
-  PUBLISHING_TOOLS_REF: publishing-v12
+  PUBLISHING_TOOLS_REF: publishing-v14
 
 jobs:
   build-complete-mip-pages-artifact:
diff --git a/.github/workflows/process-mip-publication-request.yml b/.github/workflows/process-mip-publication-request.yml
index dc21cf67b..1cc3b26b1 100644
--- a/.github/workflows/process-mip-publication-request.yml
+++ b/.github/workflows/process-mip-publication-request.yml
@@ -41,7 +41,7 @@ permissions:
 
 jobs:
   synchronize-build-and-stage:
-    uses: PyDevices/.github/.github/workflows/reusable-synchronize-mip-package.yml@publishing-v12
+    uses: PyDevices/.github/.github/workflows/reusable-synchronize-mip-package.yml@publishing-v14
     with:
       source-repository: ${{ github.event.client_payload.source_repository || inputs.source-repository }}
       source-ref: ${{ github.event.client_payload.source_ref || inputs.source-ref }}
@@ -53,7 +53,7 @@ jobs:
       # tools take the expected repository from the lockfile rather than a
       # second hardcoded map. Move a profile by editing pydevices-lock.json on
       # this branch, never by changing a pin.
-      publishing-tools-ref: publishing-v12
+      publishing-tools-ref: publishing-v14
     # The sync mints its own App token; inherit passes the App secrets through.
     secrets: inherit