diff --git a/.github/workflows/update-conda-lockfiles.yaml b/.github/workflows/update-conda-lockfiles.yaml
index ef00666..9538d3a 100644
--- a/.github/workflows/update-conda-lockfiles.yaml
+++ b/.github/workflows/update-conda-lockfiles.yaml
@@ -25,7 +25,7 @@ jobs:
         path: code
         ref: ${{ inputs.branch }}
 
-    - uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514 # v1.11.2
+    - uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2 # v1.11.5
       id: generate-token
       with:
         app-id: ${{ secrets.PR_SUBMITTER_APP_ID }}
@@ -50,7 +50,7 @@ jobs:
       working-directory: code/${{ inputs.path }}
 
     - name: Create pull request
-      uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
+      uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
       with:
         base: ${{ inputs.branch }}
         path: code
diff --git a/.github/workflows/update-uv-lockfiles.yaml b/.github/workflows/update-uv-lockfiles.yaml
index 8a6e02a..793f7b9 100644
--- a/.github/workflows/update-uv-lockfiles.yaml
+++ b/.github/workflows/update-uv-lockfiles.yaml
@@ -25,7 +25,7 @@ jobs:
         path: code
         ref: ${{ inputs.branch }}
 
-    - uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514 # v1.11.2
+    - uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2 # v1.11.5
       id: generate-token
       with:
         app-id: ${{ secrets.PR_SUBMITTER_APP_ID }}
@@ -50,7 +50,7 @@ jobs:
       working-directory: code/${{ inputs.path }}
 
     - name: Create pull request
-      uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
+      uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
       with:
         base: ${{ inputs.branch }}
         path: code