diff --git a/.github/workflows/release-doctor.yml b/.github/workflows/release-doctor.yml
index f98c6954b1..07ab736fb1 100644
--- a/.github/workflows/release-doctor.yml
+++ b/.github/workflows/release-doctor.yml
@@ -20,7 +20,7 @@ jobs:
         with: { node-version: '24.12.0', package-manager-cache: false }
       - name: Mint an all-installation release App audit token
         id: release-app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ vars.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index 40710ebbd9..3bd207a7b2 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -32,7 +32,7 @@ jobs:
     steps:
       - name: Mint short-lived release App token
         id: app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ vars.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release-stage.yml b/.github/workflows/release-stage.yml
index 258bbcfd01..2ef902e139 100644
--- a/.github/workflows/release-stage.yml
+++ b/.github/workflows/release-stage.yml
@@ -84,7 +84,7 @@ jobs:
     steps:
       - name: Mint guarded release App token for tag, release, and PR writes
         id: release-app-token
-        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           app-id: ${{ vars.RELEASE_APP_ID }}
           private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}