diff --git a/.github/workflows/flakehub.yml b/.github/workflows/flakehub.yml
index 24ad0d11..4a4d84c7 100644
--- a/.github/workflows/flakehub.yml
+++ b/.github/workflows/flakehub.yml
@@ -13,7 +13,7 @@ jobs:
       - uses: "actions/checkout@v6"
         with:
           persist-credentials: false
-      - uses: "DeterminateSystems/determinate-nix-action@v3.19.0"
+      - uses: "DeterminateSystems/determinate-nix-action@v3.20.0"
       - uses: "DeterminateSystems/flakehub-push@main"
         with:
           name: "Zoo/cli"
diff --git a/.github/workflows/generate-website-docs.yml b/.github/workflows/generate-website-docs.yml
index aa5e0a02..596bb824 100644
--- a/.github/workflows/generate-website-docs.yml
+++ b/.github/workflows/generate-website-docs.yml
@@ -42,7 +42,7 @@ jobs:
         shell: bash
         run: |
           make gen-md
-      - uses: actions/create-github-app-token@v3
+      - uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           # required
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index c7fa4007..7b8e2266 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -221,7 +221,7 @@ jobs:
         with:
           path: releases
           destination: dl.kittycad.io
-      - uses: actions/create-github-app-token@v3
+      - uses: actions/create-github-app-token@v3.1.1
         id: app-token
         with:
           # required