diff --git a/.github/workflows/seal-secrets.yml b/.github/workflows/seal-secrets.yml
index 77c1f4b..c2648b4 100644
--- a/.github/workflows/seal-secrets.yml
+++ b/.github/workflows/seal-secrets.yml
@@ -146,7 +146,7 @@ jobs:
         # v7+ supports sign-commits (commits authored via the GitHub API are
         # auto-verified) — required so the PR's commits satisfy the protected
         # master's required-signatures rule.
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           base: master