chore(deps): update actions/github-script action to v8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/github-script	action	major	v7.0.1 -> v8.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/github-script (actions/github-script)

v8.0.0

Compare Source

v7.1.0

Compare Source

What's Changed

• Upgrade husky to v9 by @​benelan in #​482
• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​485
• Upgrade IA Publish by @​Jcambass in #​486
• Fix workflow status badges by @​joshmgross in #​497
• Update usage of actions/upload-artifact by @​joshmgross in #​512
• Clear up package name confusion by @​joshmgross in #​514
• Update dependencies with npm audit fix by @​joshmgross in #​515
• Specify that the used script is JavaScript by @​timotk in #​478
• chore: Add Dependabot for NPM and Actions by @​nschonni in #​472
• Define permissions in workflows and update actions by @​joshmgross in #​531
• chore: Add Dependabot for .github/actions/install-dependencies by @​nschonni in #​532
• chore: Remove .vscode settings by @​nschonni in #​533
• ci: Use github/setup-licensed by @​nschonni in #​473
• make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by @​iamstarkov in #​508
• Remove octokit README updates for v7 by @​joshmgross in #​557
• docs: add "exec" usage examples by @​neilime in #​546
• Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by @​dependabot[bot] in #​563
• Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by @​dependabot[bot] in #​575
• Clearly document passing inputs to the script by @​joshmgross in #​603
• Update README.md by @​nebuk89 in #​610

New Contributors

• @​benelan made their first contribution in #​482
• @​Jcambass made their first contribution in #​485
• @​timotk made their first contribution in #​478
• @​iamstarkov made their first contribution in #​508
• @​neilime made their first contribution in #​546
• @​nebuk89 made their first contribution in #​610

Full Changelog: actions/github-script@v7...v7.1.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

PR Review: Update actions/github-script to v8

✅ Overall Assessment

This is a straightforward dependency update from Renovate that looks safe to merge.

🔍 Review Findings

Code Quality: ✅ Clean

• Single line change, properly pinned with commit SHA
• Follows project security practice of pinning actions by commit hash

Compatibility: ✅ No Breaking Changes

• Reviewed workflow usage at .github/workflows/update-thv-models.yml:88-113
• Script only uses github.rest.issues.create() API - unchanged between v7 and v8
• v8 is mainly about internal updates, security patches, and improved documentation

Security: ✅ Secure

• Commit SHA pinning prevents supply chain attacks
• GitHub Actions official action, trusted source

Testing: ⚠️ Recommendation

• Consider triggering the workflow manually via workflow_dispatch to verify v8 compatibility
• The failure notification path is only tested when something goes wrong

💡 Suggestions

None - this PR is ready to merge.

📝 Summary

Approve and merge. This is a routine dependency update with no breaking changes affecting the codebase.