diff --git a/.github/workflows/release-prepare.yml b/.github/workflows/release-prepare.yml
index 4137e4db..7e16ddc6 100644
--- a/.github/workflows/release-prepare.yml
+++ b/.github/workflows/release-prepare.yml
@@ -46,7 +46,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-prepare.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-prepare.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
     with:
       plugin-name: podnotes
       package-manager: npm
@@ -56,7 +56,7 @@ jobs:
       node-version: "22"
       target-sha: ${{ github.event.workflow_run.head_sha || inputs.targetSha }}
       release-bot-app-slug: podnotes-release-bot
-      app-id: ${{ vars.RELEASE_APP_ID }}
+      client-id: ${{ vars.RELEASE_APP_CLIENT_ID }}
       dry-run: ${{ inputs.dryRun == true }}
     secrets:
       release-app-private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release-trigger.yml b/.github/workflows/release-trigger.yml
index 3ff58589..fa876a5a 100644
--- a/.github/workflows/release-trigger.yml
+++ b/.github/workflows/release-trigger.yml
@@ -40,7 +40,7 @@ jobs:
       actions: write
       contents: write
       pull-requests: read
-    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-validate.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-validate.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
     with:
       pr-number: ${{ github.event.pull_request.number || inputs.pr-number }}
       plugin-name: podnotes
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f6bb582e..b3e20dcf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
       contents: write
       id-token: write
       pull-requests: read
-    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+    uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
     with:
       release-pr: ${{ inputs.releasePr }}
       plugin-name: podnotes
diff --git a/AGENTS.md b/AGENTS.md
index 9007048c..89f5280b 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -314,8 +314,8 @@ when the GitHub release is public, its tag points at the release commit, and
 `main.js` and `manifest.json` match their recorded SHA-256 digests.
 
 Three workflows in `.github/workflows/` call reusable workflows in
-`chhoumann/obsidian-plugin-workflows` pinned to v4.1.0
-(`149e37801b35c120660a1fd5e78a5471fda55726`):
+`chhoumann/obsidian-plugin-workflows` pinned to v5.0.0
+(`d6b3b8c2cf460059238043b32a08dcaa3be4828f`):
 
 1. `Prepare release` (`release-prepare.yml`) runs after a green `Test` push run
    on `master`, or by `workflow_dispatch` with an optional `targetSha`. It skips
@@ -365,7 +365,7 @@ When a feature requires a newer Obsidian API, raise `manifest.json`
 unchanged. The floor can only go up, and the release PR records it under the
 new version.
 
-Setup: install the `podnotes-release-bot` App with the `RELEASE_APP_ID`
+Setup: install the `podnotes-release-bot` App with the `RELEASE_APP_CLIENT_ID`
 variable and the `RELEASE_APP_PRIVATE_KEY` secret. The default `GITHUB_TOKEN`
 stays read-only. The pipeline writes only `release/*` and `release-run/*`
 branches and tags, never `master`, so the master ruleset needs no bypass actor.