diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 8552a61ede3..afb0abcdd81 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -21,7 +21,7 @@ jobs:
     environment: botmobile
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/needinfo-answered.yml b/.github/workflows/needinfo-answered.yml
index a7a90c4ba43..a536f7ad69e 100644
--- a/.github/workflows/needinfo-answered.yml
+++ b/.github/workflows/needinfo-answered.yml
@@ -22,7 +22,7 @@ jobs:
       pull-requests: write
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/needinfo-remove.yml b/.github/workflows/needinfo-remove.yml
index 4c874cbf816..2d302b9a153 100644
--- a/.github/workflows/needinfo-remove.yml
+++ b/.github/workflows/needinfo-remove.yml
@@ -24,7 +24,7 @@ jobs:
       pull-requests: write
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/needinfo-stale.yml b/.github/workflows/needinfo-stale.yml
index 71c5f59026f..6b6651ddd3f 100644
--- a/.github/workflows/needinfo-stale.yml
+++ b/.github/workflows/needinfo-stale.yml
@@ -19,7 +19,7 @@ jobs:
       pull-requests: write
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/pulls-merged.yml b/.github/workflows/pulls-merged.yml
index 88dfc262af6..9b65d13029d 100644
--- a/.github/workflows/pulls-merged.yml
+++ b/.github/workflows/pulls-merged.yml
@@ -18,7 +18,7 @@ jobs:
     environment: botmobile
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/shippable_builds.yml b/.github/workflows/shippable_builds.yml
index 69def2aca5d..23db08682d8 100644
--- a/.github/workflows/shippable_builds.yml
+++ b/.github/workflows/shippable_builds.yml
@@ -206,7 +206,7 @@ jobs:
       new_version_code: ${{ steps.new_version_code.outputs.new_version_code }}
     steps:
       - name: App Token Generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
         if: ${{ vars.BOT_CLIENT_ID }}
         id: app-token
         with:
@@ -765,7 +765,7 @@ jobs:
           ls -l uploads/${PKG_FILE_PRETTY}
 
       - name: App Token Generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e  # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5  # v2.0.2
         if: ${{ contains(matrix.releaseTarget, 'github') && vars.BOT_CLIENT_ID }}
         id: app-token
         with:
diff --git a/.github/workflows/uplift-merges.yml b/.github/workflows/uplift-merges.yml
index 79355a3b095..df981084cf5 100644
--- a/.github/workflows/uplift-merges.yml
+++ b/.github/workflows/uplift-merges.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: App token generate
-        uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1.11.6
+        uses: actions/create-github-app-token@3ff1caaa28b64c9cc276ce0a02e2ff584f3900c5 # v2.0.2
         if: ${{ !inputs.dryRun && vars.BOT_CLIENT_ID }}
         id: app-token
         with: