diff --git a/.github/workflows/conda-lock.yml b/.github/workflows/conda-lock.yml
index 76fc779dec19..ea2468294799 100644
--- a/.github/workflows/conda-lock.yml
+++ b/.github/workflows/conda-lock.yml
@@ -61,13 +61,13 @@ jobs:
     needs:
       - condalock
     steps:
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         id: generate_pr_token
         with:
           app_id: ${{ secrets.SQUAWK_BOT_APP_ID }}
           private_key: ${{ secrets.SQUAWK_BOT_APP_PRIVATE_KEY }}
 
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         id: generate_pr_approval_token
         with:
           app_id: ${{ secrets.PR_APPROVAL_BOT_APP_ID }}
@@ -117,7 +117,7 @@ jobs:
     needs:
       - condalock
     steps:
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         id: generate_token
         with:
           app_id: ${{ secrets.SQUAWK_BOT_APP_ID }}
diff --git a/.github/workflows/create-rotate-key-issue.yml b/.github/workflows/create-rotate-key-issue.yml
index 3d3eb140e847..0d82da660ce8 100644
--- a/.github/workflows/create-rotate-key-issue.yml
+++ b/.github/workflows/create-rotate-key-issue.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Generate a GitHub token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: generate_token
         with:
           app_id: ${{ secrets.SQUAWK_BOT_APP_ID }}
diff --git a/.github/workflows/ibis-docs-lint.yml b/.github/workflows/ibis-docs-lint.yml
index b528a3018a25..0495861efd0e 100644
--- a/.github/workflows/ibis-docs-lint.yml
+++ b/.github/workflows/ibis-docs-lint.yml
@@ -124,7 +124,7 @@ jobs:
       - name: benchmark
         run: poetry run pytest --benchmark-enable --benchmark-json .benchmarks/output.json ibis/tests/benchmarks
 
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         id: generate-token
         with:
           app_id: ${{ secrets.SQUAWK_BOT_APP_ID }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 13502733305a..46c6e48b1cf2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         id: generate_token
         with:
           app_id: ${{ secrets.APP_ID }}
diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 7cd60ab8c23c..6a37d505a268 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -62,14 +62,14 @@ jobs:
         id: needs_pr
         run: echo "did_change=${{ steps.get_current_commit.outputs.rev != steps.get_new_commit.outputs.rev }}" >> "$GITHUB_OUTPUT"
 
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         if: fromJSON(steps.needs_pr.outputs.did_change)
         id: generate_pr_token
         with:
           app_id: ${{ secrets.SQUAWK_BOT_APP_ID }}
           private_key: ${{ secrets.SQUAWK_BOT_APP_PRIVATE_KEY }}
 
-      - uses: tibdex/github-app-token@v1
+      - uses: tibdex/github-app-token@v2
         if: fromJSON(steps.needs_pr.outputs.did_change)
         id: generate_pr_approval_token
         with: