diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 514ba1f3..d5ea0c9d 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Create GitHub App token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         if: vars.CI_APP_ID
         id: app-token
         with:
diff --git a/.github/workflows/tag-maintainers.yml b/.github/workflows/tag-maintainers.yml
index d3ca8ad5..7758a123 100644
--- a/.github/workflows/tag-maintainers.yml
+++ b/.github/workflows/tag-maintainers.yml
@@ -16,7 +16,7 @@ jobs:
       github.event.pull_request.state == 'open'
     steps:
       - name: Create GitHub App token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         if: vars.CI_APP_ID
         id: app-token
         with:
diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
index 817ff4a8..214826b1 100644
--- a/.github/workflows/update-flake.yml
+++ b/.github/workflows/update-flake.yml
@@ -14,7 +14,7 @@ jobs:
         branch: [master, release-25.11]
     steps:
       - name: Create GitHub App token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         if: vars.CI_APP_ID
         id: app-token
         with:
diff --git a/.github/workflows/update-maintainers.yml b/.github/workflows/update-maintainers.yml
index f31a6073..36121e34 100644
--- a/.github/workflows/update-maintainers.yml
+++ b/.github/workflows/update-maintainers.yml
@@ -27,7 +27,7 @@ jobs:
       pr_branch: update/maintainers-${{ github.ref_name }}
     steps:
       - name: Create GitHub App token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         if: vars.CI_APP_ID
         id: app-token
         with: