diff --git a/.gitea/workflows/auto-release.yml b/.gitea/workflows/auto-release.yml
index a5af9b3..e91e05c 100644
--- a/.gitea/workflows/auto-release.yml
+++ b/.gitea/workflows/auto-release.yml
@@ -8,9 +8,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
         with:
           fetch-depth: 0
+          token: ${{ gitea.token }}
 
       - name: Generate changelog
         id: changelog
diff --git a/.gitea/workflows/capacitor-android.yml b/.gitea/workflows/capacitor-android.yml
index 445ddc6..4ffe609 100644
--- a/.gitea/workflows/capacitor-android.yml
+++ b/.gitea/workflows/capacitor-android.yml
@@ -39,7 +39,7 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
@@ -53,7 +53,7 @@ jobs:
           java-version: ${{ inputs.java-version || '17' }}
 
       - name: Setup Android SDK
-        uses: https://github.com/android-actions/setup-android@v3
+        uses: https://github.com/android-actions/setup-android@v4
 
       - name: Cache npm
         uses: https://gitea.com/actions/cache@v4
@@ -145,7 +145,7 @@ jobs:
 
       - name: Upload APK artifact
         if: inputs.output-format == 'apk'
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
           path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
@@ -153,7 +153,7 @@ jobs:
 
       - name: Upload AAB artifact
         if: inputs.output-format == 'aab'
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
           path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
@@ -161,7 +161,7 @@ jobs:
 
       - name: Upload Gradle build reports
         if: always()
-        uses: https://github.com/actions/upload-artifact@v3
+        uses: https://github.com/actions/upload-artifact@v4
         with:
           name: gradle-build-reports
           path: android/build/reports/
diff --git a/.gitea/workflows/dependency-check.yml b/.gitea/workflows/dependency-check.yml
index f167ee5..5e2d8e4 100644
--- a/.gitea/workflows/dependency-check.yml
+++ b/.gitea/workflows/dependency-check.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
diff --git a/.gitea/workflows/dependency-outdated.yml b/.gitea/workflows/dependency-outdated.yml
index ea0cb27..795a9eb 100644
--- a/.gitea/workflows/dependency-outdated.yml
+++ b/.gitea/workflows/dependency-outdated.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
diff --git a/.gitea/workflows/docker-release.yml b/.gitea/workflows/docker-release.yml
index a8c8d62..bc8972b 100644
--- a/.gitea/workflows/docker-release.yml
+++ b/.gitea/workflows/docker-release.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ${{ inputs.runner }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
@@ -54,7 +54,7 @@ jobs:
         run: npm run test
 
       - name: Login to container registry
-        uses: https://gitea.com/docker/login-action@v3
+        uses: https://gitea.com/docker/login-action@v4
         with:
           registry: gitea.pzetatouch.it
           username: ${{ secrets.G_USER }}
diff --git a/.gitea/workflows/npm-publish.yml b/.gitea/workflows/npm-publish.yml
index 4174175..97240cd 100644
--- a/.gitea/workflows/npm-publish.yml
+++ b/.gitea/workflows/npm-publish.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
diff --git a/.gitea/workflows/python-auto-release.yml b/.gitea/workflows/python-auto-release.yml
index ed9fd1e..f3f26d5 100644
--- a/.gitea/workflows/python-auto-release.yml
+++ b/.gitea/workflows/python-auto-release.yml
@@ -16,9 +16,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
         with:
           fetch-depth: 0
+          token: ${{ gitea.token }}
 
       - name: Generate changelog
         id: changelog
diff --git a/.gitea/workflows/python-dependency-check.yml b/.gitea/workflows/python-dependency-check.yml
index 5ce2027..8055be2 100644
--- a/.gitea/workflows/python-dependency-check.yml
+++ b/.gitea/workflows/python-dependency-check.yml
@@ -22,10 +22,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 
diff --git a/.gitea/workflows/python-dependency-outdated.yml b/.gitea/workflows/python-dependency-outdated.yml
index 5cb0a17..44dedb9 100644
--- a/.gitea/workflows/python-dependency-outdated.yml
+++ b/.gitea/workflows/python-dependency-outdated.yml
@@ -22,10 +22,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 
diff --git a/.gitea/workflows/python-docker-release.yml b/.gitea/workflows/python-docker-release.yml
index 6c5b96d..0866f13 100644
--- a/.gitea/workflows/python-docker-release.yml
+++ b/.gitea/workflows/python-docker-release.yml
@@ -30,10 +30,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 
@@ -72,7 +72,7 @@ jobs:
         run: pytest --tb=short -q
 
       - name: Login to container registry
-        uses: https://gitea.com/docker/login-action@v3
+        uses: https://gitea.com/docker/login-action@v4
         with:
           registry: gitea.pzetatouch.it
           username: ${{ secrets.G_USER }}
diff --git a/.gitea/workflows/python-quality-gates.yml b/.gitea/workflows/python-quality-gates.yml
index 3bf38d7..70a956e 100644
--- a/.gitea/workflows/python-quality-gates.yml
+++ b/.gitea/workflows/python-quality-gates.yml
@@ -23,10 +23,10 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Python
-        uses: https://github.com/actions/setup-python@v5
+        uses: https://github.com/actions/setup-python@v5.2.0
         with:
           python-version: ${{ inputs.python-version || '3.11' }}
 
diff --git a/.gitea/workflows/quality-gates.yml b/.gitea/workflows/quality-gates.yml
index 8361cf5..0afdf3c 100644
--- a/.gitea/workflows/quality-gates.yml
+++ b/.gitea/workflows/quality-gates.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: https://gitea.com/actions/checkout@v4
+        uses: https://gitea.com/actions/checkout@v6
 
       - name: Setup Node.js
         uses: https://gitea.com/actions/setup-node@v4
diff --git a/examples/capacitor/ci.yml b/examples/capacitor/ci.yml
index e6eff85..6d16e85 100644
--- a/examples/capacitor/ci.yml
+++ b/examples/capacitor/ci.yml
@@ -19,11 +19,11 @@ on:
       
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit
 
   android-debug:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: debug
diff --git a/examples/capacitor/maintenance.yml b/examples/capacitor/maintenance.yml
index e5d03f3..3232b3c 100644
--- a/examples/capacitor/maintenance.yml
+++ b/examples/capacitor/maintenance.yml
@@ -18,19 +18,19 @@ on:
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
     secrets: inherit
 
   dependency-outdated:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit
diff --git a/examples/capacitor/release.yml b/examples/capacitor/release.yml
index f749c46..5ae4a6c 100644
--- a/examples/capacitor/release.yml
+++ b/examples/capacitor/release.yml
@@ -18,8 +18,8 @@
 #     }
 #   }
 #
-# NOTA: i job girano in parallelo (no needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: gitea-release attende entrambe le build Android via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -30,19 +30,20 @@ on:
 
 jobs:
   android-apk:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: release
       output-format: apk
 
   android-aab:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/capacitor-android.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/capacitor-android.yml@v1
     secrets: inherit
     with:
       build-type: release
       output-format: aab
 
   gitea-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [android-apk, android-aab]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit
diff --git a/examples/libreria-npm/ci.yml b/examples/libreria-npm/ci.yml
index 5f89be9..fa919ce 100644
--- a/examples/libreria-npm/ci.yml
+++ b/examples/libreria-npm/ci.yml
@@ -16,5 +16,5 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit
diff --git a/examples/libreria-npm/maintenance.yml b/examples/libreria-npm/maintenance.yml
index efc87b5..c9b6c6a 100644
--- a/examples/libreria-npm/maintenance.yml
+++ b/examples/libreria-npm/maintenance.yml
@@ -1,5 +1,9 @@
 # Copia in: .gitea/workflows/maintenance.yml
-# Combina branch-cleanup (PR merge) e dependency-check (settimanale)
+# Trigger:
+#   - PR merged           → cleanup branch sorgente
+#   - Ogni lunedì 08:00   → security audit vulnerabilità (settimanale)
+#   - Ogni 1° del mese    → controllo pacchetti obsoleti (mensile)
+#   - Manuale             → workflow_dispatch (esegue tutti i job di manutenzione)
 
 name: Maintenance
 
@@ -7,16 +11,26 @@ on:
   pull_request:
     types: [closed]
   schedule:
-    - cron: '0 8 * * 1'
+    - cron: '0 2 * * 3'    # ogni mercoledì alle 02:00 → security audit
+    - cron: '0 2 1 * *'    # ogni 1° del mese alle 02:00 → outdated check
   workflow_dispatch:
 
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
-  dependency-check:
-    if: gitea.event_name == 'schedule' || gitea.event_name == 'workflow_dispatch'
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+  dependency-audit:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 3')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
+    secrets: inherit
+
+  dependency-outdated:
+    if: >
+      gitea.event_name == 'workflow_dispatch' ||
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 1 * *')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit
diff --git a/examples/libreria-npm/release.yml b/examples/libreria-npm/release.yml
index c7c5209..18705b4 100644
--- a/examples/libreria-npm/release.yml
+++ b/examples/libreria-npm/release.yml
@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → pubblica su npm + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende npm-publish via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -13,9 +13,10 @@ on:
 
 jobs:
   npm-publish:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/npm-publish.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/npm-publish.yml@v1
     secrets: inherit
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [npm-publish]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit
diff --git a/examples/microservizio/ci.yml b/examples/microservizio/ci.yml
index d6494b0..816a898 100644
--- a/examples/microservizio/ci.yml
+++ b/examples/microservizio/ci.yml
@@ -16,7 +16,7 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/quality-gates.yml@v1
     secrets: inherit
     # with:
     #   node-version: '22.17'   # opzionale, default già impostato
diff --git a/examples/microservizio/maintenance.yml b/examples/microservizio/maintenance.yml
index e5d03f3..17fe277 100644
--- a/examples/microservizio/maintenance.yml
+++ b/examples/microservizio/maintenance.yml
@@ -11,26 +11,26 @@ on:
   pull_request:
     types: [closed]
   schedule:
-    - cron: '0 8 * * 1'    # ogni lunedì alle 08:00 → security audit
-    - cron: '0 8 1 * *'    # ogni 1° del mese alle 08:00 → outdated check
+    - cron: '0 2 * * 1'    # ogni lunedì alle 02:00 → security audit
+    - cron: '0 4 1 * *'    # ogni 1° del mese alle 04:00 → outdated check
   workflow_dispatch:
 
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
-      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-check.yml@v1
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 2 * * 1')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-check.yml@v1
     secrets: inherit
 
   dependency-outdated:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
-      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
+      (gitea.event_name == 'schedule' && gitea.event.schedule == '0 4 1 * *')
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/dependency-outdated.yml@v1
     secrets: inherit
diff --git a/examples/microservizio/release.yml b/examples/microservizio/release.yml
index 0770429..6ef91c8 100644
--- a/examples/microservizio/release.yml
+++ b/examples/microservizio/release.yml
@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → build Docker + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende docker-release via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di auto-release.yml.
 
 name: Release
 
@@ -14,11 +14,12 @@ on:
 jobs:
   docker-release:
     runs-on: catthehacker-latest  # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/docker-release.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/docker-release.yml@v1
     secrets: inherit
     with:
       runner: catthehacker-latest  # runner con Docker pre-installato
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/auto-release.yml@v1
+    needs: [docker-release]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/auto-release.yml@v1
     secrets: inherit
diff --git a/examples/python/ci.yml b/examples/python/ci.yml
index 191d08a..fdc6b42 100644
--- a/examples/python/ci.yml
+++ b/examples/python/ci.yml
@@ -24,7 +24,7 @@ on:
 
 jobs:
   quality-gates:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-quality-gates.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'   # opzionale, default già impostato
diff --git a/examples/python/maintenance.yml b/examples/python/maintenance.yml
index 427b787..4665caa 100644
--- a/examples/python/maintenance.yml
+++ b/examples/python/maintenance.yml
@@ -18,14 +18,14 @@ on:
 jobs:
   branch-cleanup:
     if: gitea.event_name == 'pull_request' && gitea.event.pull_request.merged == true
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/branch-cleanup.yml@v1
     secrets: inherit
 
   dependency-audit:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 * * 1')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-check.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'
@@ -35,7 +35,7 @@ jobs:
     if: >
       gitea.event_name == 'workflow_dispatch' ||
       (gitea.event_name == 'schedule' && gitea.event.schedule == '0 8 1 * *')
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-dependency-outdated.yml@v1
     secrets: inherit
     # with:
     #   python-version: '3.11'
diff --git a/examples/python/release.yml b/examples/python/release.yml
index a213ad2..773cd99 100644
--- a/examples/python/release.yml
+++ b/examples/python/release.yml
@@ -1,8 +1,8 @@
 # Copia in: .gitea/workflows/release.yml
 # Trigger: git tag v* → build Docker + crea release Gitea
 #
-# NOTA: i job girano in parallelo (non sequenziali con needs).
-# Gitea bug #31900: needs + workflow_call + checkout causa errori di autenticazione.
+# NOTA: auto-release attende docker-release via needs.
+# Workaround Gitea bug #31900: token esplicito nel checkout di python-auto-release.yml.
 #
 # Prerequisiti:
 #   - Dockerfile presente nella root del progetto
@@ -19,7 +19,7 @@ on:
 jobs:
   docker-release:
     runs-on: catthehacker-latest  # workaround Gitea bug #34986: runs-on non rispettato in workflow_call
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-docker-release.yml@v1
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-docker-release.yml@v1
     secrets: inherit
     with:
       runner: catthehacker-latest  # runner con Docker pre-installato
@@ -27,5 +27,6 @@ jobs:
       # install-extras: 'dev'     # opzionale
 
   auto-release:
-    uses: https://gitea.com/Punga78/shared-actions/.gitea/workflows/python-auto-release.yml@v1
+    needs: [docker-release]
+    uses: https://gitea.pzetatouch.it/devops/shared-actions/.gitea/workflows/python-auto-release.yml@v1
     secrets: inherit