diff --git a/.github/workflows/issue-automation.yml b/.github/workflows/issue-automation.yml
index 800e7248e..b4a330eda 100644
--- a/.github/workflows/issue-automation.yml
+++ b/.github/workflows/issue-automation.yml
@@ -38,7 +38,7 @@ jobs:
       # survive the narrowing.
       - name: Generate App token (narrow)
         if: github.event.action == 'opened' || github.event.action == 'reopened'
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         id: token-narrow
         with:
           app-id: ${{ secrets.ILM_PROJECT_BOT_APP_ID }}
@@ -51,7 +51,7 @@ jobs:
       # a different repo than the child).
       - name: Generate App token (broad, for version-propagation)
         if: github.event.action == 'opened'
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         id: token-broad
         with:
           app-id: ${{ secrets.ILM_PROJECT_BOT_APP_ID }}
diff --git a/.github/workflows/release-automation.yml b/.github/workflows/release-automation.yml
index e21889ca1..b8acc0293 100644
--- a/.github/workflows/release-automation.yml
+++ b/.github/workflows/release-automation.yml
@@ -24,7 +24,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Generate App token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v3
         id: app-token
         with:
           app-id: ${{ secrets.ILM_PROJECT_BOT_APP_ID }}