diff --git a/.github/workflows/issue-labels.yml b/.github/workflows/issue-labels.yml
index 25313b35..910d6330 100644
--- a/.github/workflows/issue-labels.yml
+++ b/.github/workflows/issue-labels.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Apply area labels
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const issue = context.payload.issue;
diff --git a/.github/workflows/mira-pause.yml b/.github/workflows/mira-pause.yml
index 162098ef..cd6b6a0d 100644
--- a/.github/workflows/mira-pause.yml
+++ b/.github/workflows/mira-pause.yml
@@ -19,7 +19,7 @@ jobs:
       issues: write
     steps:
       - name: Comment /mira pause and label
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const { owner, repo } = context.repo;
diff --git a/.github/workflows/pull-request-labels.yml b/.github/workflows/pull-request-labels.yml
index 6bd702b8..cb3242a7 100644
--- a/.github/workflows/pull-request-labels.yml
+++ b/.github/workflows/pull-request-labels.yml
@@ -15,7 +15,7 @@ jobs:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           sync-labels: true
       - name: Apply size label
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const labels = ['size:XS','size:S','size:M','size:L','size:XL'];
@@ -35,7 +35,7 @@ jobs:
       # (#355). Re-apply it when the latest Mira command on the PR is a pause.
       - name: Keep mira-paused after syncing labels
         if: github.event.pull_request.head.repo.full_name == github.repository
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const { owner, repo } = context.repo;