diff --git a/CHANGELOG.md b/CHANGELOG.md
index ed4eb917a..d30480b55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
+### Changed
+
+- Generated `release-please.yaml` workflow now passes `RELEASE_PLEASE_APP_ID` and `RELEASE_PLEASE_PRIVATE_KEY` secrets to the `giantswarm/github-workflows` `release.yaml` reusable workflow instead of `TAYLORBOT_GITHUB_ACTION`. This matches the App-based authentication introduced in the reusable workflow (replaces the taylorbot PAT). Requires those two org secrets to be available to the consuming repo.
+
 ## [7.43.0] - 2026-05-21
 
 ### Added
diff --git a/pkg/gen/input/workflows/internal/file/release_please.yaml.template b/pkg/gen/input/workflows/internal/file/release_please.yaml.template
index e12183bdb..4bfe9e5f9 100644
--- a/pkg/gen/input/workflows/internal/file/release_please.yaml.template
+++ b/pkg/gen/input/workflows/internal/file/release_please.yaml.template
@@ -16,4 +16,5 @@ jobs:
       contents: write
       pull-requests: write
     secrets:
-      TAYLORBOT_GITHUB_ACTION: ${{ secrets.TAYLORBOT_GITHUB_ACTION }}
+      RELEASE_PLEASE_APP_ID: ${{ secrets.RELEASE_PLEASE_APP_ID }}
+      RELEASE_PLEASE_PRIVATE_KEY: ${{ secrets.RELEASE_PLEASE_PRIVATE_KEY }}