diff --git a/.github/workflows/governance-issue.yml b/.github/workflows/governance-issue.yml
index 565a947..ff39455 100644
--- a/.github/workflows/governance-issue.yml
+++ b/.github/workflows/governance-issue.yml
@@ -10,7 +10,7 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const body = context.payload.issue.body || '';
diff --git a/.github/workflows/governance-pr.yml b/.github/workflows/governance-pr.yml
index 77d0dd1..78eda21 100644
--- a/.github/workflows/governance-pr.yml
+++ b/.github/workflows/governance-pr.yml
@@ -18,7 +18,7 @@ jobs:
     if: github.event.pull_request.draft == false && github.event.pull_request.user.login != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const body = context.payload.pull_request.body || '';
diff --git a/.github/workflows/governance-report.yml b/.github/workflows/governance-report.yml
index 3f82945..194af4b 100644
--- a/.github/workflows/governance-report.yml
+++ b/.github/workflows/governance-report.yml
@@ -20,7 +20,7 @@ jobs:
   report:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const ORG = 'Quantum-L9';
diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index 4410ff8..6b06a5d 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -15,7 +15,7 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const issue = context.payload.issue;
diff --git a/.github/workflows/pr-files.yml b/.github/workflows/pr-files.yml
index 3cf32a1..355b5ea 100644
--- a/.github/workflows/pr-files.yml
+++ b/.github/workflows/pr-files.yml
@@ -28,7 +28,7 @@ jobs:
           git diff --name-status "$BASE...$HEAD" > /tmp/changed.txt
           git diff --shortstat "$BASE...$HEAD" > /tmp/shortstat.txt
 
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const fs = require('fs');
diff --git a/.github/workflows/pr-gates.yml b/.github/workflows/pr-gates.yml
index d2264ff..16a62ab 100644
--- a/.github/workflows/pr-gates.yml
+++ b/.github/workflows/pr-gates.yml
@@ -12,7 +12,7 @@ jobs:
     if: github.event.pull_request.draft == false && github.event.pull_request.user.login != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const body = context.payload.pull_request.body || '';
diff --git a/.github/workflows/seed-governance.yml b/.github/workflows/seed-governance.yml
index 031e232..65edc80 100644
--- a/.github/workflows/seed-governance.yml
+++ b/.github/workflows/seed-governance.yml
@@ -40,7 +40,7 @@ jobs:
           private-key: ${{ secrets.GOVERNANCE_APP_PRIVATE_KEY }}
           owner: Quantum-L9
 
-      - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ steps.token.outputs.token }}
           script: |