diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
index 47586cdc..ad1d81aa 100644
--- a/.github/workflows/bench.yml
+++ b/.github/workflows/bench.yml
@@ -80,7 +80,7 @@ jobs:
           fail-on-alert: false
       - name: Comment on PR
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index deda8700..463b84c9 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -62,7 +62,7 @@ jobs:
       # ------------------------------------------------------------------
       - name: Evaluate merge eligibility
         id: evaluate
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           UPDATE_TYPE: ${{ steps.meta.outputs.update-type }}
           DEPENDENCY_TYPE: ${{ steps.meta.outputs.dependency-type }}
@@ -117,7 +117,7 @@ jobs:
       # ------------------------------------------------------------------
       - name: Auto-merge eligible PR
         if: steps.evaluate.outputs.eligible == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -138,7 +138,7 @@ jobs:
       # ------------------------------------------------------------------
       - name: Comment — manual review required
         if: steps.evaluate.outputs.eligible == 'false'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |