diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
index 7a9720b..19b051f 100644
--- a/.github/actionlint.yaml
+++ b/.github/actionlint.yaml
@@ -3,3 +3,13 @@ self-hosted-runner:
   labels:
     - gpu-bench
     - gpu-ci
+
+paths:
+  .github/workflows/**/*.{yml,yaml}:
+    ignore:
+      # `actions/create-github-app-token@v3` renamed `app-id` to `client-id`
+      # and deprecated the former. actionlint's bundled metadata for the action
+      # predates the rename, so it reports the new input as unknown and the
+      # deprecated one as missing. Drop these once actionlint refreshes it.
+      - 'input "client-id" is not defined in action "actions/create-github-app-token'
+      - 'missing input "app-id" which is required by action "actions/create-github-app-token'
diff --git a/.github/workflows/repo-sync.yml b/.github/workflows/repo-sync.yml
index d89de06..4eca8e0 100644
--- a/.github/workflows/repo-sync.yml
+++ b/.github/workflows/repo-sync.yml
@@ -32,7 +32,7 @@ jobs:
     - uses: actions/create-github-app-token@v3
       id: generate-token
       with:
-        app-id: ${{ secrets.TOKEN_APP_ID }}
+        client-id: ${{ secrets.TOKEN_APP_ID }}
         private-key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
         permission-contents: write
         permission-workflows: write
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
index cc035a5..209ec20 100644
--- a/.github/workflows/typos.yml
+++ b/.github/workflows/typos.yml
@@ -54,7 +54,7 @@ jobs:
         if: steps.typo-check.outputs.typos == 'true'
         id: generate-token
         with:
-          app-id: ${{ secrets.TOKEN_APP_ID }}
+          client-id: ${{ secrets.TOKEN_APP_ID }}
           private-key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
           permission-contents: write
           permission-pull-requests: write