diff --git a/.github/workflows/assisted-by.yml b/.github/workflows/assisted-by.yml
index 8979af4..98e772f 100644
--- a/.github/workflows/assisted-by.yml
+++ b/.github/workflows/assisted-by.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check for disclosure, and say how to add it
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           PR_BODY: ${{ github.event.pull_request.body }}
         with:
diff --git a/.github/workflows/discussion-welcome.yml b/.github/workflows/discussion-welcome.yml
index 43fd24d..aa49b92 100644
--- a/.github/workflows/discussion-welcome.yml
+++ b/.github/workflows/discussion-welcome.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Greet a first-time participant
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           # Never interpolate user-controlled text into a shell command. It is
           # passed as an environment variable and read by the script instead.