diff --git a/.github/workflows/copybara-pr.yaml b/.github/workflows/copybara-pr.yaml
index b3c2743..b481e7f 100644
--- a/.github/workflows/copybara-pr.yaml
+++ b/.github/workflows/copybara-pr.yaml
@@ -17,7 +17,7 @@ jobs:
           java-version: 21
       - name: Generate an app token for render-oss
         id: generate-token-oss
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3  # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_KEY }}
@@ -25,7 +25,7 @@ jobs:
           repositories: sdk
       - name: Generate an app token for renderinc
         id: generate-token-renderinc
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3  # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
         with:
           app-id: ${{ vars.APP_ID }}
           private-key: ${{ secrets.APP_KEY }}