diff --git a/.github/workflows/merge.yml b/.github/workflows/merge.yml
index 29412ad..ffae4c8 100644
--- a/.github/workflows/merge.yml
+++ b/.github/workflows/merge.yml
@@ -182,7 +182,9 @@ jobs:
       # Minted only after validation succeeded, and scoped to this repository.
       - name: Mint the App token
         id: token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        # The caller supplies an App ID, so stay on the warning-free Node-24 release before v3.1
+        # deprecated app-id in favour of a distinct client ID.
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859  # v3.0.0
         with:
           app-id: ${{ inputs.app_id }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}