diff --git a/.github/workflows/new-pr-comments.yml b/.github/workflows/new-pr-comments.yml
index 0e51df805d..769b1eb492 100644
--- a/.github/workflows/new-pr-comments.yml
+++ b/.github/workflows/new-pr-comments.yml
@@ -23,14 +23,14 @@ jobs:
 
       - name: Comment on new Fork PR
         if: github.event.pull_request.user.id != 49699333
-        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
+        uses: thollander/actions-comment-pull-request@e2c37e53a7d2227b61585343765f73a9ca57eda9
         with:
           message: Thank you for contributing to ${{ github.event.pull_request.base.repo.name }}! The workflow '${{ github.workflow }}' requires repository secrets and will not run without approval. Maintainers can add the `CI Cleared` label to allow it to run. Note that any changes to ci-security.yml and ci-pipeline.yml will not be reflected.
-          GITHUB_TOKEN: ${{ steps.app-token-generation.outputs.token }}
+          github-token: ${{ steps.app-token-generation.outputs.token }}
 
       - name: Comment on dependabot PR
         if: github.event.pull_request.user.id == 49699333
-        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
+        uses: thollander/actions-comment-pull-request@e2c37e53a7d2227b61585343765f73a9ca57eda9
         with:
           message: Set the milestone to the next ${{ (github.head_ref == 'master' && 'patch') || 'minor' }} version, check for supply chain attacks, and then add the `CI Cleared` label to allow CI to run.
-          GITHUB_TOKEN: ${{ steps.app-token-generation.outputs.token }}
+          github-token: ${{ steps.app-token-generation.outputs.token }}