diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 376473cb..b7097f06 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -46,7 +46,7 @@ jobs:
       packages: read
     steps:
       - name: Generate Token
-        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         id: app-token
         with:
           app-id: ${{ secrets.BOT_APP_ID }}
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index 464527e6..787b5357 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -13,7 +13,7 @@
       runs-on: ubuntu-latest
       steps:
         - name: Generate Token
-          uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2
+          uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3
           id: app-token
           with:
             app-id: "${{ secrets.BOT_APP_ID }}"