diff --git a/.github/workflows/package_dispatch.yml b/.github/workflows/package_dispatch.yml
index 49378d9a11..b5e405e22d 100644
--- a/.github/workflows/package_dispatch.yml
+++ b/.github/workflows/package_dispatch.yml
@@ -9,7 +9,7 @@ jobs:
     if: github.event.registry_package.package_type == 'npm' && github.event.registry_package.name == 'adf-core'
     steps:
       - name: Dispatch event to monorepo
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           github-token: ${{ secrets.PAT_WRITE_PKG }}
           retries: 3
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 411aa5ecff..21566c348d 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -248,7 +248,7 @@ jobs:
           fetch-depth: 1
       - name: PR contains forbidden labels
         id: pr-forbidden
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const issueHasLabels = require('./scripts/github/update/check-issue-has-label.js');
diff --git a/.github/workflows/release-branch.yml b/.github/workflows/release-branch.yml
index 57cdce53de..b966d56bb0 100644
--- a/.github/workflows/release-branch.yml
+++ b/.github/workflows/release-branch.yml
@@ -93,7 +93,7 @@ jobs:
           set -u;
           ./scripts/github/build/bumpversion.sh
       - name: Set migrations
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const setMigrations = require('./scripts/github/release/set-migrations.js');
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 11aafeb24d..56d70a3cee 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -128,7 +128,7 @@ jobs:
           set -u;
           ./scripts/github/build/bumpversion.sh
       - name: Set migrations
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const setMigrations = require('./scripts/github/release/set-migrations.js');