diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 92bdc82..ad0cb88 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -26,7 +26,7 @@ jobs:
 
       - name: Enable auto-merge for safe patch updates
         if: steps.metadata.outputs.update-type == 'version-update:semver-patch'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = context.payload.pull_request.number;
diff --git a/.github/workflows/pr-governance.yml b/.github/workflows/pr-governance.yml
index 0be8fa1..c633ccb 100644
--- a/.github/workflows/pr-governance.yml
+++ b/.github/workflows/pr-governance.yml
@@ -34,7 +34,7 @@ jobs:
           requireScope: false
 
       - name: Validate labels and PR template sections
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const pr = context.payload.pull_request;
diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml
index bc6efa9..1656635 100644
--- a/.github/workflows/tag-release.yml
+++ b/.github/workflows/tag-release.yml
@@ -59,7 +59,7 @@ jobs:
           fi
 
       - name: Validate automated release readiness gates
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const owner = context.repo.owner;