diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml
index d0e81f3d..76aafb74 100644
--- a/.github/workflows/link-check.yml
+++ b/.github/workflows/link-check.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Generate Short Lived OAuth App Token
-        uses: actions/create-github-app-token@30bf6253fa41bdc8d1501d202ad15287582246b4 # v2.0.3
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 89cfc3b5..92d0d633 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Generate Short Lived OAuth App Token
-        uses: actions/create-github-app-token@30bf6253fa41bdc8d1501d202ad15287582246b4 # v2.0.3
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index ed2b90e4..8ce0d0b1 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -13,7 +13,7 @@ jobs:
       contents: write
     steps:
       - name: Generate Short Lived OAuth App Token
-        uses: actions/create-github-app-token@30bf6253fa41bdc8d1501d202ad15287582246b4 # v2.0.3
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"
diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml
index 7f93297a..01c23749 100644
--- a/.github/workflows/stale.yaml
+++ b/.github/workflows/stale.yaml
@@ -12,7 +12,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Generate Short Lived OAuth App Token
-        uses: actions/create-github-app-token@30bf6253fa41bdc8d1501d202ad15287582246b4 # v2.0.3
+        uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
         id: app-token
         with:
           app-id: "${{ secrets.BOT_APP_ID }}"