diff --git a/.github/workflows/monthly_optimization_planner.yml b/.github/workflows/monthly_optimization_planner.yml
index f455b95..f80300e 100644
--- a/.github/workflows/monthly_optimization_planner.yml
+++ b/.github/workflows/monthly_optimization_planner.yml
@@ -43,7 +43,7 @@ jobs:
       - name: Create GitHub App token for cross-repo access
         id: cross_repo_app_token
         if: steps.cross_repo_credentials.outputs.has_app_credentials == 'true'
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ vars.CROSS_REPO_GITHUB_APP_ID }}
           private-key: ${{ secrets.CROSS_REPO_GITHUB_APP_PRIVATE_KEY }}
diff --git a/tests/test_monthly_optimization_planner_workflow_config.py b/tests/test_monthly_optimization_planner_workflow_config.py
index 8a0ce2e..b6c33e3 100644
--- a/tests/test_monthly_optimization_planner_workflow_config.py
+++ b/tests/test_monthly_optimization_planner_workflow_config.py
@@ -22,7 +22,7 @@ def test_planner_workflow_downloads_artifacts_posts_issue_and_fans_out_tasks(sel
         self.assertIn("CROSS_REPO_GITHUB_APP_ID", workflow)
         self.assertIn("Detect GitHub App credentials", workflow)
         self.assertIn("has_app_credentials", workflow)
-        self.assertIn("actions/create-github-app-token@v2", workflow)
+        self.assertIn("actions/create-github-app-token@v3", workflow)
         self.assertIn("Resolve cross-repo access token", workflow)
         self.assertIn("source=github_app", workflow)
         self.assertIn("source=personal_access_token", workflow)