diff --git a/.github/actions/generate-tokens/action.yml b/.github/actions/generate-tokens/action.yml
index f66c79783..5c783dc3d 100644
--- a/.github/actions/generate-tokens/action.yml
+++ b/.github/actions/generate-tokens/action.yml
@@ -35,7 +35,7 @@ runs:
     # GitHub tokens generated from GitHub Apps can access resources from one organization,
     # so we need to generate a token for each organization.
     - name: Generate GitHub token (rust-lang)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-lang-token
       with:
         app-id: ${{ inputs.app-id }}
@@ -43,7 +43,7 @@ runs:
         owner: rust-lang
 
     - name: Generate GitHub token (rust-lang-deprecated)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-lang-deprecated-token
       with:
         app-id: ${{ inputs.app-id }}
@@ -51,7 +51,7 @@ runs:
         owner: rust-lang-deprecated
 
     - name: Generate GitHub token (rust-lang-nursery)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-lang-nursery-token
       with:
         app-id: ${{ inputs.app-id }}
@@ -59,7 +59,7 @@ runs:
         owner: rust-lang-nursery
 
     - name: Generate GitHub token (rust-analyzer)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-analyzer-token
       with:
         app-id: ${{ inputs.app-id }}
@@ -67,7 +67,7 @@ runs:
         owner: rust-analyzer
 
     - name: Generate GitHub token (rust-embedded)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-embedded-token
       with:
         app-id: ${{ inputs.app-id }}
@@ -75,7 +75,7 @@ runs:
         owner: rust-embedded
 
     - name: Generate GitHub token (rust-dev-tools)
-      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+      uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: rust-dev-tools-token
       with:
         app-id: ${{ inputs.app-id }}
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d1ca33d7a..8a05791f1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -72,7 +72,7 @@ jobs:
         run: echo "$PR_NUMBER" > build/pr.txt
 
       - name: Upload the built JSON as a GitHub artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: team-api-output
           path: build