diff --git a/.gitea/workflows/sync-milestones.yml b/.gitea/workflows/sync-milestones.yml
index bde4f2d..7597eda 100644
--- a/.gitea/workflows/sync-milestones.yml
+++ b/.gitea/workflows/sync-milestones.yml
@@ -68,23 +68,11 @@ jobs:
           git submodule update --init --recursive --depth=1
 
       - name: Make sure curl and jq are available
-        run: |
-          set -euo pipefail
-          if command -v curl >/dev/null && command -v jq >/dev/null; then exit 0; fi
-          sudo_cmd=""
-          if [ "$(id -u)" -ne 0 ]; then sudo_cmd="sudo"; fi
-          $sudo_cmd apt-get update -qq
-          $sudo_cmd apt-get install -y -qq curl jq
+        run: bash framework/scripts/ci-publish-milestones.sh ensure-tools
 
       - name: Publish accepted milestones
         env:
           GITEA_TOKEN: ${{ secrets.TOKEN_FOR_GITEA }}
           # Empty on a push (a real run); "true" or "false" on a manual run.
           DRY_RUN: ${{ inputs.dry_run }}
-        run: |
-          set -euo pipefail
-          if [ "$DRY_RUN" = "true" ]; then
-            bash framework/scripts/sync-project.sh --accepted-only
-          else
-            bash framework/scripts/sync-project.sh --accepted-only --apply
-          fi
+        run: bash framework/scripts/ci-publish-milestones.sh publish
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a701ebe..726d4d7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,10 @@ Each release lists its changes in these groups, in this order:
   runner for the host's default limit.
 - `actions/checkout` is referenced by the exact tag `v4.2.2` instead of the
   moving tag `v4`. No change for callers.
+- The framework pin moves from `v0.5.2` to `v0.6.0`, and the two long `run:`
+  blocks of this repository's own `sync-milestones.yml` call
+  `framework/scripts/ci-publish-milestones.sh`. No change for callers of the
+  shared workflows.
 
 ## [1.1.0] - 2026-10-11
 
diff --git a/framework b/framework
index 4fd69c4..2b4a058 160000
--- a/framework
+++ b/framework
@@ -1 +1 @@
-Subproject commit 4fd69c49703a08022ac6ddd1ff9d05e058a8af98
+Subproject commit 2b4a058f26dd3c7cc3eb51fea7918f4d1ff8d964