diff --git a/.github/workflows/maintainer-approval.yml b/.github/workflows/maintainer-approval.yml
index 8a758eb306..b9f0b6e305 100644
--- a/.github/workflows/maintainer-approval.yml
+++ b/.github/workflows/maintainer-approval.yml
@@ -29,7 +29,7 @@ jobs:
       checks: write
     steps:
       - name: Auto-approve for merge queue
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.checks.create({
@@ -62,7 +62,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check approval and suggest reviewers
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           retries: 3
           script: |-
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 42a3936c58..c36d2e29d5 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -393,7 +393,7 @@ jobs:
     steps:
       - name: Skip integration tests (pull request)
         if: ${{ github.event_name == 'pull_request' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.checks.create({
@@ -411,7 +411,7 @@ jobs:
 
       - name: Auto-approve for merge group
         if: ${{ github.event_name == 'merge_group' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.checks.create({
@@ -445,7 +445,7 @@ jobs:
 
     steps:
       - name: Skip integration tests
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |-
             await github.rest.checks.create({
diff --git a/.github/workflows/release-prs.yml b/.github/workflows/release-prs.yml
index 0048cf04b5..c7f41dcb37 100644
--- a/.github/workflows/release-prs.yml
+++ b/.github/workflows/release-prs.yml
@@ -55,7 +55,7 @@ jobs:
 
       - name: Dispatch setup-cli release PR
         if: ${{ !inputs.dry_run }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.DECO_GITHUB_TOKEN }}
           script: |
@@ -117,7 +117,7 @@ jobs:
 
       - name: Dispatch homebrew-tap release PR
         if: ${{ !inputs.dry_run }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.DECO_GITHUB_TOKEN }}
           script: |
@@ -156,7 +156,7 @@ jobs:
 
       - name: Dispatch VS Code extension update PR
         if: ${{ !inputs.dry_run }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.DECO_GITHUB_TOKEN }}
           script: |