diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 3529d6c2..bcb38951 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -148,7 +148,7 @@ jobs:
           name: update-site
       - name: Prepare Release Notes
         run: .ci/files/prepare_release_notes.sh
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 #v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 #v3.3.0
         id: pmd-actions-helper-app-token
         with:
           client-id: ${{ secrets.PMD_ACTIONS_HELPER_CLIENT_ID }}
@@ -232,7 +232,7 @@ jobs:
       - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 #v8.0.2
         with:
           name: update-site
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 #v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 #v3.3.0
         id: pmd-actions-helper-app-token
         with:
           client-id: ${{ secrets.PMD_ACTIONS_HELPER_CLIENT_ID }}
diff --git a/.github/workflows/publish-snapshot.yml b/.github/workflows/publish-snapshot.yml
index af0532f9..a03c7292 100644
--- a/.github/workflows/publish-snapshot.yml
+++ b/.github/workflows/publish-snapshot.yml
@@ -180,7 +180,7 @@ jobs:
       - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 #v8.0.2
         with:
           name: update-site
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 #v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 #v3.3.0
         id: pmd-actions-helper-app-token
         with:
           client-id: ${{ secrets.PMD_ACTIONS_HELPER_CLIENT_ID }}