diff --git a/.github/actions/app-exists/action.yaml b/.github/actions/app-exists/action.yaml
index e51ec00e7..76fe17b2e 100644
--- a/.github/actions/app-exists/action.yaml
+++ b/.github/actions/app-exists/action.yaml
@@ -18,7 +18,7 @@ runs:
   steps:
     - name: Application Exists
       id: application
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const applicationName = '${{ inputs.app }}';
diff --git a/.github/actions/app-inventory/action.yaml b/.github/actions/app-inventory/action.yaml
index 94f9bd1a6..10d96e1a7 100644
--- a/.github/actions/app-inventory/action.yaml
+++ b/.github/actions/app-inventory/action.yaml
@@ -12,7 +12,7 @@ runs:
   using: composite
   steps:
     - name: Application Inventory
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       id: inventory
       with:
         script: |
diff --git a/.github/actions/app-versions/action.yaml b/.github/actions/app-versions/action.yaml
index 98610b883..2928ea439 100644
--- a/.github/actions/app-versions/action.yaml
+++ b/.github/actions/app-versions/action.yaml
@@ -35,7 +35,7 @@ runs:
       run: npm install semver
 
     - name: Application Versions
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       id: versions
       with:
         script: |
diff --git a/.github/actions/release-tag/action.yaml b/.github/actions/release-tag/action.yaml
index ab5d031f7..710c99ba2 100644
--- a/.github/actions/release-tag/action.yaml
+++ b/.github/actions/release-tag/action.yaml
@@ -18,7 +18,7 @@ runs:
   steps:
     - name: Get Release Tag
       id: release
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         github-token: ${{ inputs.token }}
         script: |
diff --git a/.github/workflows/app-builder.yaml b/.github/workflows/app-builder.yaml
index 0f84153b6..196a86602 100644
--- a/.github/workflows/app-builder.yaml
+++ b/.github/workflows/app-builder.yaml
@@ -80,7 +80,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Get Target Architecture
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         id: target
         with:
           script: |
diff --git a/.github/workflows/deprecate-app.yaml b/.github/workflows/deprecate-app.yaml
index 4915d4d3e..ee1b73784 100644
--- a/.github/workflows/deprecate-app.yaml
+++ b/.github/workflows/deprecate-app.yaml
@@ -69,7 +69,7 @@ jobs:
           private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
 
       - name: Merge Pull Request
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ steps.app-token.outputs.token }}
           script: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index af9f3b3e0..7237cad82 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -42,7 +42,7 @@ jobs:
       apps: ${{ steps.apps.outputs.apps }}
     steps:
       - name: Get Apps
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         id: apps
         env:
           APPS: ${{ github.event_name == 'workflow_dispatch' && inputs.app || join(fromJSON(needs.prepare.outputs.changed-files), ' ') }}