diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 25c0548..25b87fb 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -63,7 +63,7 @@ jobs:
       # `<actions>/<name>--sha`.
       - name: tag major and minor versions
         if: steps.release.outputs.releases_created == 'true'
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
         env:
           RELEASES: ${{ toJSON(steps.release.outputs) }}
         with:
diff --git a/bundle-size/action.yml b/bundle-size/action.yml
index 35b64b1..6e35860 100644
--- a/bundle-size/action.yml
+++ b/bundle-size/action.yml
@@ -89,7 +89,7 @@ runs:
 
     - name: Generate stats report and comment on PR
       if: ${{ github.event_name == 'pull_request' && steps.main-stats-info.outputs.run-id != '' }}
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0
       with:
         script: |
           const script = require('${{ github.action_path }}/index.js')