diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml
index bae5e76f..0840f899 100644
--- a/.github/workflows/auto-label.yml
+++ b/.github/workflows/auto-label.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Gather Info
         id: check
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { data: pr } = await github.rest.pulls.get({
@@ -59,7 +59,7 @@ jobs:
 
       - name: Sync Author
         if: steps.check.outputs.has_assignees == 'false'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.issues.addAssignees({
@@ -72,7 +72,7 @@ jobs:
             console.log('Assigned PR author: ${{ steps.check.outputs.author }}');
 
       - name: Sync Labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const newLabels = ${{ steps.check.outputs.labels }};
diff --git a/.github/workflows/pr-closed.yml b/.github/workflows/pr-closed.yml
index 2aa271ff..91039bbe 100644
--- a/.github/workflows/pr-closed.yml
+++ b/.github/workflows/pr-closed.yml
@@ -29,7 +29,7 @@ jobs:
           github.event.pull_request.user.login != 'PatrykKuniczak' &&
           github.event.pull_request.user.login != 'dependabot[bot]' &&
           github.event.pull_request.user.login != 'copilot-swe-agent[bot]'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           comment: Thanks for helping make WXT better!
         with: