diff --git a/template/{% if repository_provider == 'github' %}.github{% endif %}/workflows/{% if dependency_updater == 'renovate' %}renovate.yaml{% endif %}.jinja b/template/{% if repository_provider == 'github' %}.github{% endif %}/workflows/{% if dependency_updater == 'renovate' %}renovate.yaml{% endif %}.jinja
index 3836cea..228fd99 100644
--- a/template/{% if repository_provider == 'github' %}.github{% endif %}/workflows/{% if dependency_updater == 'renovate' %}renovate.yaml{% endif %}.jinja	
+++ b/template/{% if repository_provider == 'github' %}.github{% endif %}/workflows/{% if dependency_updater == 'renovate' %}renovate.yaml{% endif %}.jinja	
@@ -40,7 +40,7 @@ jobs:
 {% if renovate_auth_method == 'github_app' %}
       - name: Generate GitHub App token
         id: app_token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
         with:
           app-id: {% raw %}${{ secrets.RENOVATE_APP_ID }}{% endraw %}
           private-key: {% raw %}${{ secrets.RENOVATE_APP_PRIVATE_KEY }}{% endraw %}