diff --git a/.github/workflows/apm-materialize.yml b/.github/workflows/apm-materialize.yml
index 0d524906..77e13af2 100644
--- a/.github/workflows/apm-materialize.yml
+++ b/.github/workflows/apm-materialize.yml
@@ -47,7 +47,7 @@ jobs:
       - name: Generate App token
         id: app-token
         # renovate: datasource=github-releases depName=actions/create-github-app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ vars.RELEASE_PLEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_PLEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/apm-sync.yml b/.github/workflows/apm-sync.yml
index be4b8a4a..4e402b03 100644
--- a/.github/workflows/apm-sync.yml
+++ b/.github/workflows/apm-sync.yml
@@ -94,7 +94,7 @@ jobs:
         id: app-token
         if: inputs.app-id != ''
         # renovate: datasource=github-releases depName=actions/create-github-app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ inputs.app-id }}
           private-key: ${{ secrets.app-private-key }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 463e2f15..d0253433 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -100,7 +100,7 @@ jobs:
 
       - name: Generate App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           app-id: ${{ inputs.app-id }}
           private-key: ${{ secrets.app-private-key }}