diff --git a/.github/workflows/cleanup_coverage.yml b/.github/workflows/cleanup_coverage.yml
index e85c32d3f61c..b42de646102c 100644
--- a/.github/workflows/cleanup_coverage.yml
+++ b/.github/workflows/cleanup_coverage.yml
@@ -53,7 +53,7 @@ jobs:
       # Find and update the '## Coverage Report' comment in the PR
       - name: 'Update coverage comment in PR'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/label_commands.yml b/.github/workflows/label_commands.yml
index 988b7abc4537..b8749699fcc9 100644
--- a/.github/workflows/label_commands.yml
+++ b/.github/workflows/label_commands.yml
@@ -50,7 +50,7 @@ jobs:
 
       - name: 'Remove label'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -67,7 +67,7 @@ jobs:
 
       - name: 'Add in-progress label'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -222,7 +222,7 @@ jobs:
         # Run the step regardless of the outcome of previous steps:
         if: always()
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/label_good_first_prs.yml b/.github/workflows/label_good_first_prs.yml
index 1dc542b0ec06..8e060bbe4ec7 100644
--- a/.github/workflows/label_good_first_prs.yml
+++ b/.github/workflows/label_good_first_prs.yml
@@ -75,7 +75,7 @@ jobs:
       - name: 'Add "Good First PR" label if PR references a "Good First Issue"'
         if: ${{ steps.check-pr.outputs.good-first-pr == 'true' }}
         # Pin action to full-length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 0df4dc5f2b3a..8a90cd701588 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -68,7 +68,7 @@ jobs:
       - name: 'Add "First-time Contributor" label if PR is from a first-time contributor'
         if: ${{ github.event.action == 'opened' || github.event.action == 'reopened' }}
         # Pin action to full-length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -93,7 +93,7 @@ jobs:
       - name: 'Add "Needs Review" label if PR is opened and not draft'
         if: ${{ github.event.action == 'opened' && github.event.pull_request.draft == false }}
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -108,7 +108,7 @@ jobs:
       - name: 'Add "Needs Review" label if PR is ready for review or review is requested'
         if: ${{ github.event.action == 'ready_for_review' || github.event.action == 'review_requested' }}
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -123,7 +123,7 @@ jobs:
       - name: 'Remove "Needs Review" label if PR is converted to draft or closed'
         if: ${{ github.event.action == 'converted_to_draft' || github.event.action == 'closed' }}
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -142,7 +142,7 @@ jobs:
       - name: 'Remove "Ready To Merge" label if PR is merged'
         if: ${{ github.event.action == 'closed' && github.event.pull_request.merged == true }}
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -160,7 +160,7 @@ jobs:
       # Remove "Needs Review" and "Needs Changes" labels when "Ready To Merge" is assigned:
       - name: 'Remove "Needs Review" and "Needs Changes" labels when "Ready To Merge" is assigned'
         if: ${{ github.event.action == 'labeled' && github.event.label.name == 'Ready To Merge' }}
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -182,7 +182,7 @@ jobs:
       - name: 'Remove "First-time Contributor" label from other open PRs of same author if PR is merged'
         if: ${{ github.event.action == 'closed' && github.event.pull_request.merged == true }}
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/publish_coverage_pr.yml b/.github/workflows/publish_coverage_pr.yml
index 2c4eeedf01a0..2fc63b23bcb4 100644
--- a/.github/workflows/publish_coverage_pr.yml
+++ b/.github/workflows/publish_coverage_pr.yml
@@ -78,7 +78,7 @@ jobs:
       - name: 'Post report as comment to PR'
         if: steps.download-metadata.outcome == 'success'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/run_tests_coverage.yml b/.github/workflows/run_tests_coverage.yml
index c6a50a5a09c3..d30fdb7eeb7e 100644
--- a/.github/workflows/run_tests_coverage.yml
+++ b/.github/workflows/run_tests_coverage.yml
@@ -202,7 +202,7 @@ jobs:
       - name: 'Post report as comment to commit'
         if: github.event_name == 'push' && steps.check-changed.outputs.skip == 'false'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
diff --git a/.github/workflows/slash_commands.yml b/.github/workflows/slash_commands.yml
index eae69f6ea07f..5d27639d747b 100644
--- a/.github/workflows/slash_commands.yml
+++ b/.github/workflows/slash_commands.yml
@@ -46,7 +46,7 @@ jobs:
       # Add "bot: In progress" label to the issue / PR:
       - name: 'Add in-progress label'
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -59,7 +59,7 @@ jobs:
 
       # Add initial reaction to comment with slash command:
       - name: 'Add initial reaction'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -269,7 +269,7 @@ jobs:
       - name: 'Notify of command failure'
         if: |
           contains(needs.*.result, 'failure')
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |
@@ -288,7 +288,7 @@ jobs:
         # Run the step regardless of the outcome of previous steps:
         if: always()
         # Pin action to full length commit SHA
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.STDLIB_BOT_PAT_REPO_WRITE }}
           script: |