diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 08dfdae..21a002e 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -279,7 +279,7 @@ jobs:
           if [ -f .dockerignore ]; then grep -q "self-workflow" .dockerignore || echo "self-workflow" >> .dockerignore; else echo "self-workflow" >> .dockerignore; fi
       # jscpd:ignore-end
       - id: preparel-lint-options
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           LINT_INPUT: ${{ inputs.lint }}
         with:
@@ -391,7 +391,7 @@ jobs:
           if [ -f .dockerignore ]; then grep -q "self-workflow" .dockerignore || echo "self-workflow" >> .dockerignore; else echo "self-workflow" >> .dockerignore; fi
 
       - id: prepare-test-options
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           TEST_INPUT: ${{ inputs.test }}
         with:
diff --git a/actions/build/action.yml b/actions/build/action.yml
index cd1649e..ebe73ba 100644
--- a/actions/build/action.yml
+++ b/actions/build/action.yml
@@ -72,7 +72,7 @@ runs:
       with:
         working-directory: ${{ inputs.working-directory }}
 
-    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+    - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         BUILD_ENV: ${{ inputs.build-env }}
         BUILD_SECRETS: ${{ inputs.build-secrets }}
@@ -102,7 +102,7 @@ runs:
             core.exportVariable(key.trim(), value.trim());
           }
 
-    - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+    - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         BUILD_COMMANDS: ${{ inputs.build-commands }}
         RUN_SCRIPT_COMMAND: ${{ inputs.container == 'true' && steps.get-package-manager.outputs.run-script-command || steps.setup-node.outputs.run-script-command }}
diff --git a/actions/lint/action.yml b/actions/lint/action.yml
index 1e8f692..6cd4a4e 100644
--- a/actions/lint/action.yml
+++ b/actions/lint/action.yml
@@ -49,7 +49,7 @@ runs:
         working-directory: ${{ inputs.working-directory }}
 
     - id: run-lint
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         RUN_LINT_COMMAND: ${{ inputs.container == 'true' && steps.get-package-manager.outputs.run-script-command || steps.setup-node.outputs.run-script-command }}
         WORKING_DIRECTORY: ${{ inputs.working-directory }}
@@ -82,7 +82,7 @@ runs:
     # Auto-detect report file if not specified
     - id: detect-report-file
       if: always()
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         REPORT_FILE: ${{ inputs.report-file }}
         WORKING_DIRECTORY: ${{ inputs.working-directory }}
diff --git a/actions/test/action.yml b/actions/test/action.yml
index 702ca90..d418e6e 100644
--- a/actions/test/action.yml
+++ b/actions/test/action.yml
@@ -66,7 +66,7 @@ runs:
 
     - id: run-test
       name: 🧪 Run tests
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         RUN_TEST_COMMAND: ${{ inputs.container == 'true' && steps.get-package-manager.outputs.run-script-command || steps.setup-node.outputs.run-script-command }}
         WORKING_DIRECTORY: ${{ inputs.working-directory }}
@@ -97,7 +97,7 @@ runs:
     # Auto-detect coverage files if not specified
     - id: detect-coverage-files
       if: always() && inputs.coverage == 'github'
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         WORKING_DIRECTORY: ${{ inputs.working-directory }}
         COVERAGE_FILES: ${{ inputs.coverage-files }}
@@ -149,7 +149,7 @@ runs:
 
     - if: always() && inputs.coverage == 'github'
       id: get-coverage-report-summary
-      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         SUMMARY_FILE: ${{ runner.temp }}/coveragereport-${{ github.run_id }}/SummaryGithub.md
       with:
@@ -168,7 +168,7 @@ runs:
 
     - name: 📊 Add coverage PR comment
       if: always() && steps.get-coverage-report-summary.outputs.summary-content && github.event_name == 'pull_request'
-      uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@5f11437c716059f30c635f90055060e4ef8b31a0 # 0.28.0
+      uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@753288393de1f3d92f687a6761d236ca800f5306 # 0.28.1
       with:
         title: "Code Coverage Report"
         body: ${{ steps.get-coverage-report-summary.outputs.summary-content }}