diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index aacea19bb..f4d44c945 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -20,7 +20,8 @@ jobs:
           role-to-assume: ${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
           aws-region: eu-west-1
 
-      - uses: guardian/setup-scala@v1
+      - name: Setup Scala
+        uses: guardian/setup-scala@v1
 
       - name: Build the stack
         run: |
diff --git a/apps/common-lib/src/main/scala/com/gu/typerighter/lib/CommonConfig.scala b/apps/common-lib/src/main/scala/com/gu/typerighter/lib/CommonConfig.scala
index 8e9ca1b99..8303211f2 100644
--- a/apps/common-lib/src/main/scala/com/gu/typerighter/lib/CommonConfig.scala
+++ b/apps/common-lib/src/main/scala/com/gu/typerighter/lib/CommonConfig.scala
@@ -9,6 +9,7 @@ import com.amazonaws.services.s3.AmazonS3ClientBuilder
 import com.amazonaws.services.secretsmanager.AWSSecretsManagerClientBuilder
 import com.amazonaws.services.secretsmanager.model.GetSecretValueRequest
 import com.gu.pandomainauth.PanDomainAuthSettingsRefresher
+import com.gu.pandomainauth.S3BucketLoader
 import play.api.libs.ws.WSClient
 
 import scala.util.Try
@@ -52,12 +53,10 @@ abstract class CommonConfig(
     .withRegion(awsRegion)
     .build()
 
-  val panDomainSettings = new PanDomainAuthSettingsRefresher(
+  val panDomainSettings = PanDomainAuthSettingsRefresher(
     domain = stageDomain,
     system = appName,
-    bucketName = "pan-domain-auth-settings",
-    settingsFileKey = s"$stageDomain.settings",
-    s3Client = pandaS3Client
+    s3BucketLoader = S3BucketLoader.forAwsSdkV1(pandaS3Client, "pan-domain-auth-settings")
   )
 
   private val secretsManagerClient = AWSSecretsManagerClientBuilder
diff --git a/build.sbt b/build.sbt
index 4446b6c62..01f949e54 100644
--- a/build.sbt
+++ b/build.sbt
@@ -28,7 +28,7 @@ val languageToolVersion = "6.0"
 val awsSdkVersion = "1.12.749"
 val capiModelsVersion = "17.5.1"
 val capiClientVersion = "19.2.1"
-val pandaVersion = "4.0.0"
+val pandaVersion = "7.0.0"
 val circeVersion = "0.14.1"
 val scalikejdbcVersion = scalikejdbc.ScalikejdbcBuildInfo.version
 val scalikejdbcPlayVersion = "2.8.0-scalikejdbc-3.5"