diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..042f4fc
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "thursday"
diff --git a/.github/workflows/report-and-push.yml b/.github/workflows/report-and-push.yml
index 51d6a5e..0ac54c7 100644
--- a/.github/workflows/report-and-push.yml
+++ b/.github/workflows/report-and-push.yml
@@ -37,7 +37,7 @@ jobs:
           nix build --accept-flake-config .#packages.x86_64-linux.default
       - name: Generate a token
         id: generate-token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ secrets.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}