diff --git a/.forgejo/kcl-ci/kcl.mod b/.forgejo/kcl-ci/kcl.mod
index c830904..ae4c8a5 100644
--- a/.forgejo/kcl-ci/kcl.mod
+++ b/.forgejo/kcl-ci/kcl.mod
@@ -4,4 +4,4 @@ edition = "v0.12.3"
 version = "0.0.1"
 
 [dependencies]
-kcl-ci = { git = "https://git.wxs.ro/actions/kcl-ci", tag = "v1.37.0" }
+kcl-ci = { git = "https://git.wxs.ro/actions/kcl-ci", tag = "v1.37.1" }
diff --git a/.forgejo/kcl-ci/kcl.mod.lock b/.forgejo/kcl-ci/kcl.mod.lock
index 469d2e7..1139131 100644
--- a/.forgejo/kcl-ci/kcl.mod.lock
+++ b/.forgejo/kcl-ci/kcl.mod.lock
@@ -4,4 +4,4 @@
     full_name = "kcl-ci_0.0.1"
     version = "0.0.1"
     url = "https://git.wxs.ro/actions/kcl-ci"
-    git_tag = "v1.37.0"
+    git_tag = "v1.37.1"
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 0867c22..3f11cc0 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
diff --git a/.forgejo/workflows/claude.yml b/.forgejo/workflows/claude.yml
index 578a831..63fb9ca 100644
--- a/.forgejo/workflows/claude.yml
+++ b/.forgejo/workflows/claude.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -40,7 +40,7 @@ jobs:
         platform: forgejo
         assignee_trigger: claude
         show_full_output: 'true'
-        allowed_tools: Bash,Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
+        allowed_tools: Bash(git:*),Bash(bun:*),Bash(curl:*),Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
     - name: Debug on failure
       if: failure()
       run: |
diff --git a/.forgejo/workflows/kcl-ci-build.yml b/.forgejo/workflows/kcl-ci-build.yml
index 64f6267..9a87088 100644
--- a/.forgejo/workflows/kcl-ci-build.yml
+++ b/.forgejo/workflows/kcl-ci-build.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -21,7 +21,7 @@ jobs:
     runs-on: grunt
     steps:
     - name: Build KCL workflows
-      uses: https://${{ secrets.READ_REPO_TOKEN }}@git.wxs.ro/actions/kcl-ci@v1.37.0
+      uses: https://${{ secrets.READ_REPO_TOKEN }}@git.wxs.ro/actions/kcl-ci@v1.37.1
       with:
         read-repo-token: ${{ secrets.READ_REPO_TOKEN }}
         working-dir: '.forgejo/kcl-ci'
diff --git a/.forgejo/workflows/test-action.yml b/.forgejo/workflows/test-action.yml
index c367f2d..395f72e 100644
--- a/.forgejo/workflows/test-action.yml
+++ b/.forgejo/workflows/test-action.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
diff --git a/.forgejo/workflows/upstream-sync.yml b/.forgejo/workflows/upstream-sync.yml
index dbe9a5a..e9292f4 100644
--- a/.forgejo/workflows/upstream-sync.yml
+++ b/.forgejo/workflows/upstream-sync.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci