diff --git a/.github/workflows/benchmarking.yml b/.github/workflows/benchmarking.yml
index 7471923b85..5a68793508 100644
--- a/.github/workflows/benchmarking.yml
+++ b/.github/workflows/benchmarking.yml
@@ -155,7 +155,7 @@ jobs:
         id: should-retry-test
         # Note: We need to use always() here, because the previous run step might be marked as failed.
         if: ${{ always() && steps.run-benchmarks-in-sauce-lab.outcome == 'failure' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           SAUCE_USERNAME: ${{ secrets.SAUCE_USERNAME }}
           SAUCE_ACCESS_KEY: ${{ secrets.SAUCE_ACCESS_KEY }}
diff --git a/.github/workflows/changes-in-high-risk-code.yml b/.github/workflows/changes-in-high-risk-code.yml
index 2faa03ef3c..1c1bdbca9d 100644
--- a/.github/workflows/changes-in-high-risk-code.yml
+++ b/.github/workflows/changes-in-high-risk-code.yml
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Remove previous comments
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             core.debug('Listing comments')
@@ -64,7 +64,7 @@ jobs:
               }
             }
       - name: Comment on PR to notify of changes in high risk files
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           high_risk_code: ${{ needs.files-changed.outputs.high_risk_code_files }}
         with:
diff --git a/.github/workflows/nightly-test.yml b/.github/workflows/nightly-test.yml
index 2d133f978c..720cff3590 100644
--- a/.github/workflows/nightly-test.yml
+++ b/.github/workflows/nightly-test.yml
@@ -86,7 +86,7 @@ jobs:
       - name: Get failed jobs
         id: failed_jobs
         if: steps.results.outputs.status != 'success'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const jobs = await github.paginate(
diff --git a/.github/workflows/ready-to-merge-workflow.yml b/.github/workflows/ready-to-merge-workflow.yml
index 01d4fcb98e..e9626a74c4 100644
--- a/.github/workflows/ready-to-merge-workflow.yml
+++ b/.github/workflows/ready-to-merge-workflow.yml
@@ -10,7 +10,7 @@ jobs:
       - name: Check for exact 'ready-to-merge' label
         if: ${{ github.event_name == 'pull_request' }}
         id: check-label
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const expectedLabel = 'ready-to-merge';