diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml
index 241a68c3..d0e4a339 100644
--- a/.github/workflows/auto-label.yml
+++ b/.github/workflows/auto-label.yml
@@ -45,7 +45,7 @@ jobs:
               - 'jest.config.*'
 
       - name: Auto assign and label
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { owner, repo } = context.repo;
diff --git a/.github/workflows/bundle-analysis.yml b/.github/workflows/bundle-analysis.yml
index ba5ed534..a4629ee7 100644
--- a/.github/workflows/bundle-analysis.yml
+++ b/.github/workflows/bundle-analysis.yml
@@ -118,7 +118,7 @@ jobs:
           fi
 
       - name: Comment on PR
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { owner, repo } = context.repo;
diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml
index 27de35c5..66426561 100644
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@@ -70,7 +70,7 @@ jobs:
       # Comment preview URL on the PR
       - name: Comment Preview URL
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9.0.0
         with:
           script: |
             const branch = context.payload.pull_request.head.ref
diff --git a/.github/workflows/pr-issue-check.yml b/.github/workflows/pr-issue-check.yml
index c3f605af..4c557e47 100644
--- a/.github/workflows/pr-issue-check.yml
+++ b/.github/workflows/pr-issue-check.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check PR body for issue references
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const prBody = context.payload.pull_request.body || '';
diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index 2bcf753d..d38f7693 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -286,7 +286,7 @@ jobs:
 
       - name: Comment on source PR
         if: steps.collect.outputs.skip != 'true'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           NEW_VERSION: ${{ steps.version.outputs.new }}
           EXISTING_FOUND: ${{ steps.check.outputs.found }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3d19749e..34077d50 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -154,7 +154,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Comment on PR
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { owner, repo } = context.repo;