diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index f17962b3c..a5720b1bc 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -389,7 +389,7 @@ jobs:
           merge-multiple: true
 
       - name: Update unstable git tag
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         with:
           script: |
             const script = require('./.github/scripts/update-unstable-tag.cjs');
@@ -460,7 +460,7 @@ jobs:
             .github/scripts
 
       - name: Remove label and comment
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         env:
           BUILD_IMAGE_MANIFEST: ${{ needs.build-image.outputs.metadata }}
         with:
diff --git a/.github/workflows/merge-back.yaml b/.github/workflows/merge-back.yaml
index 17b0e0804..d28d68c20 100644
--- a/.github/workflows/merge-back.yaml
+++ b/.github/workflows/merge-back.yaml
@@ -30,7 +30,7 @@ jobs:
             .github/scripts
 
       - name: Push branch and open a PR
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         env:
           SHA: ${{ inputs.sha }}
         with:
diff --git a/.github/workflows/release-branch.yaml b/.github/workflows/release-branch.yaml
index 1d52cd60b..6a43fe49f 100644
--- a/.github/workflows/release-branch.yaml
+++ b/.github/workflows/release-branch.yaml
@@ -112,7 +112,7 @@ jobs:
             .github/scripts
 
       - name: Create a new release branch
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         env:
           BRANCH: release/v${{ needs.compute-version.outputs.short }}
           SHA: ${{ needs.tag.outputs.sha }}
diff --git a/.github/workflows/release-bump.yaml b/.github/workflows/release-bump.yaml
index 22b157a5e..46251a410 100644
--- a/.github/workflows/release-bump.yaml
+++ b/.github/workflows/release-bump.yaml
@@ -82,7 +82,7 @@ jobs:
             .github/scripts
 
       - name: Update the release branch
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         env:
           BRANCH: "${{ github.ref_name }}"
           SHA: ${{ needs.tag.outputs.sha }}
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index cf894e8af..ec3ea290d 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -46,7 +46,7 @@ jobs:
         run: cargo metadata --format-version 1
 
       - name: Commit and tag using the GitHub API
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         id: commit
         env:
           VERSION: ${{ inputs.version }}
@@ -58,7 +58,7 @@ jobs:
             return await script({ core, github, context });
 
       - name: Update the refs
-        uses: actions/github-script@v7.0.1
+        uses: actions/github-script@v8.0.0
         env:
           VERSION: ${{ inputs.version }}
           TAG_SHA: ${{ fromJSON(steps.commit.outputs.result).tag }}