diff --git a/check-cla/action.yml b/check-cla/action.yml
index 84f81bf..f65b18f 100644
--- a/check-cla/action.yml
+++ b/check-cla/action.yml
@@ -137,7 +137,7 @@ runs:
 
     # if unsigned, create PR
     - name: Create PR with new CLA signee
-      uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
+      uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
       id: pull
       if: steps.metadata.outputs.has_signed == 'false'
       with: