diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index e441a7e..e16abba 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -22,7 +22,7 @@ jobs:
     timeout-minutes: 5
     steps:
       - name: Add triage labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const item = context.payload.issue || context.payload.pull_request;
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 12dd859..157c74d 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -40,7 +40,7 @@ jobs:
           persist-credentials: false
 
       - name: Sync labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PRUNE: ${{ inputs.prune || 'false' }}
         with: