diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index f704a0d5d9b..e122349eb38 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 0
       -
         name: Set environment variables
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           INPUT_GITHUB-REF: ${{ github.ref }}
         with:
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 6111c79bbe7..68502f49388 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -26,7 +26,7 @@ jobs:
     
     steps:
       - name: Handle lifecycle commands
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           # Set to 'true' to test without making actual changes
           DEBUG_ONLY: 'false'
diff --git a/.github/workflows/validate-upstream.yml b/.github/workflows/validate-upstream.yml
index 727b552ea43..ad56cf56deb 100644
--- a/.github/workflows/validate-upstream.yml
+++ b/.github/workflows/validate-upstream.yml
@@ -51,7 +51,7 @@ jobs:
         # that folder. If not, create a placeholder stub file for the data file.
         name: Copy data files
         if: ${{ inputs.data-files-id != '' && inputs.data-files-folder != '' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const fs = require('fs');