diff --git a/.github/workflows/update-autofirma-CAs-by-provider.yml b/.github/workflows/update-autofirma-CAs-by-provider.yml
index 1f3a108..083acdc 100644
--- a/.github/workflows/update-autofirma-CAs-by-provider.yml
+++ b/.github/workflows/update-autofirma-CAs-by-provider.yml
@@ -81,7 +81,7 @@ jobs:
           merge-multiple: true
 
       - name: Create Pull Request for Updated CA Files
-        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
+        uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
         with:
           branch: update/autofirma-CAs-by-provider
           base: main
diff --git a/.github/workflows/update-autofirma-trusted-providers.yml b/.github/workflows/update-autofirma-trusted-providers.yml
index 0593339..570207a 100644
--- a/.github/workflows/update-autofirma-trusted-providers.yml
+++ b/.github/workflows/update-autofirma-trusted-providers.yml
@@ -22,7 +22,7 @@ jobs:
           nix develop --accept-flake-config --command download-autofirma-trusted-providers > nix/autofirma/truststore/prestadores/providers.json
 
       - name: Create Pull Request for the new trusted providers file
-        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
+        uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
         with:
           branch: update/autofirma-trusted-providers
           base: main
diff --git a/.github/workflows/update-fixed-output-derivations-lock.yml b/.github/workflows/update-fixed-output-derivations-lock.yml
index e0aaa4b..d2593c3 100644
--- a/.github/workflows/update-fixed-output-derivations-lock.yml
+++ b/.github/workflows/update-fixed-output-derivations-lock.yml
@@ -28,7 +28,7 @@ jobs:
           nix develop --accept-flake-config --command update-fixed-output-derivations
 
       - name: Create Pull Request for the updated fixed-output derivations lock file
-        uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
+        uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
         with:
           # Use the branch name from the push event for both the new branch and the PR base
           branch: update/fixed-output-derivations/${{ github.ref_name }}