diff --git a/.github/workflows/reusable-mqt-core-update.yml b/.github/workflows/reusable-mqt-core-update.yml
index 2617ba6..51018bd 100644
--- a/.github/workflows/reusable-mqt-core-update.yml
+++ b/.github/workflows/reusable-mqt-core-update.yml
@@ -60,7 +60,7 @@ jobs:
           fi
       # Create a GitHub App token
       - id: create-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/reusable-python-linter.yml b/.github/workflows/reusable-python-linter.yml
index 630e28f..ce91704 100644
--- a/.github/workflows/reusable-python-linter.yml
+++ b/.github/workflows/reusable-python-linter.yml
@@ -129,7 +129,7 @@ jobs:
           failure() && steps.stubs.outputs.outdated == 'true' && env.APP_CONFIGURED == 'true' &&
           github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository &&
           github.event.pull_request.head.ref != github.event.repository.default_branch
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/templating.yml b/.github/workflows/templating.yml
index 317e219..d809912 100644
--- a/.github/workflows/templating.yml
+++ b/.github/workflows/templating.yml
@@ -33,7 +33,7 @@ jobs:
       pull-requests: write # Needed to create a PR
     steps:
       - id: create-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index ae7440d..9a25e56 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
         with:
           advanced-security: ${{ github.event_name == 'push' }}
           persona: pedantic
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c3b7388..c6935c8 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -95,7 +95,7 @@ repos:
 
   ## Check workflows with zizmor
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.30.1
+    rev: v1.31.1
     hooks:
       - id: zizmor
         args: