diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 7d715a43..00aa2677 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -8,7 +8,7 @@ jobs:
   validate-pr-title:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/create-github-app-token@v3.0.0
+      - uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           app-id: ${{ secrets.DS_RELEASE_BOT_ID }}
diff --git a/.github/workflows/rust-release-pyo3-bytes.yml b/.github/workflows/rust-release-pyo3-bytes.yml
index 26737992..093ff5fb 100644
--- a/.github/workflows/rust-release-pyo3-bytes.yml
+++ b/.github/workflows/rust-release-pyo3-bytes.yml
@@ -13,7 +13,7 @@ jobs:
       id-token: write # Required for OIDC token exchange
     steps:
       - uses: actions/checkout@v6
-      - uses: rust-lang/crates-io-auth-action@b7e9a28eded4986ec6b1fa40eeee8f8f165559ec # v1
+      - uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe # v1
         id: auth
       - run: cargo publish -p pyo3-bytes
         env:
diff --git a/.github/workflows/rust-release-pyo3-object_store.yml b/.github/workflows/rust-release-pyo3-object_store.yml
index e46c4303..1d3becab 100644
--- a/.github/workflows/rust-release-pyo3-object_store.yml
+++ b/.github/workflows/rust-release-pyo3-object_store.yml
@@ -13,7 +13,7 @@ jobs:
       id-token: write # Required for OIDC token exchange
     steps:
       - uses: actions/checkout@v6
-      - uses: rust-lang/crates-io-auth-action@b7e9a28eded4986ec6b1fa40eeee8f8f165559ec # v1
+      - uses: rust-lang/crates-io-auth-action@bbd81622f20ce9e2dd9622e3218b975523e45bbe # v1
         id: auth
       - run: cargo publish -p pyo3-object_store
         env: