diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 01dea21..7dabe7f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -56,7 +56,7 @@ jobs:
           RUNNER_DEBUG: 1
         with:
           # dry_run: true
-          semantic_version: 23.0.6
+          semantic_version: 23.0.7
 
           extra_plugins:
             "@semantic-release/changelog@\
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 25fe935..41d2050 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -50,7 +50,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
-      - uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c3 # v1.9.1
+      - uses: actions/create-github-app-token@7bfa3a4717ef143a604ee0a99d859b8886a96d00 # v1.9.3
         id: app-token
         with:
           # see https://github.com/renovatebot/renovate/blob/47c8501c412c2f53f61ca292a5039f5939c32c5d/lib/modules/platform/github/readme.md?plain=1#L28