diff --git a/.github/workflows/flux-diff.yaml b/.github/workflows/flux-diff.yaml
index 570675683..21d224d1b 100644
--- a/.github/workflows/flux-diff.yaml
+++ b/.github/workflows/flux-diff.yaml
@@ -24,7 +24,7 @@ jobs:
       fail-fast: false
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/flux-image-test.yaml b/.github/workflows/flux-image-test.yaml
index 4699af468..72305d538 100644
--- a/.github/workflows/flux-image-test.yaml
+++ b/.github/workflows/flux-image-test.yaml
@@ -21,7 +21,7 @@ jobs:
       matrix: ${{ steps.extract-images.outputs.images }}
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 4fff2e261..b6eb1822f 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/labels-sync.yaml b/.github/workflows/labels-sync.yaml
index f1348cc34..1655ca7c0 100644
--- a/.github/workflows/labels-sync.yaml
+++ b/.github/workflows/labels-sync.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/lychee.yaml b/.github/workflows/lychee.yaml
index 6847229a6..ed390922c 100644
--- a/.github/workflows/lychee.yaml
+++ b/.github/workflows/lychee.yaml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index f6508465b..7cc1d3899 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@4821f52fa7a8e45784f1d99cdb1c27bec9f00720 # v2
+        uses: actions/create-github-app-token@db3cdf40984fe6fd25ae19ac2bf2f4886ae8d959 # v2
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"