diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 6a0416b69..c6a64fbe0 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -198,16 +198,6 @@
         'npx (?<depName>[^@]+)@(?<currentValue>[^\\s]+)',
       ],
     },
-    {
-      customType: 'regex',
-      datasourceTemplate: 'npm',
-      managerFilePatterns: [
-        '.github/workflows/**',
-      ],
-      matchStrings: [
-        'npm install (?<depName>[^@\\s]+)@(?<currentValue>[^\\s]+)',
-      ],
-    },
     {
       customType: 'regex',
       datasourceTemplate: 'java-version',
diff --git a/.github/scripts/package-lock.json b/.github/scripts/package-lock.json
new file mode 100644
index 000000000..513b765ca
--- /dev/null
+++ b/.github/scripts/package-lock.json
@@ -0,0 +1,27 @@
+{
+  "name": "github-scripts",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "github-scripts",
+      "version": "1.0.0",
+      "dependencies": {
+        "yaml": "2.8.0"
+      }
+    },
+    "node_modules/yaml": {
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.0.tgz",
+      "integrity": "sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ==",
+      "license": "ISC",
+      "bin": {
+        "yaml": "bin.mjs"
+      },
+      "engines": {
+        "node": ">= 14.6"
+      }
+    }
+  }
+}
diff --git a/.github/scripts/package.json b/.github/scripts/package.json
new file mode 100644
index 000000000..7477003a2
--- /dev/null
+++ b/.github/scripts/package.json
@@ -0,0 +1,9 @@
+{
+  "//": "Dependencies for GitHub Actions workflows that use actions/github-script",
+  "name": "github-scripts",
+  "version": "1.0.0",
+  "private": true,
+  "dependencies": {
+    "yaml": "2.8.0"
+  }
+}
diff --git a/.github/workflows/assign-issue-owners.yml b/.github/workflows/assign-issue-owners.yml
index 11965eae5..7d7acba67 100644
--- a/.github/workflows/assign-issue-owners.yml
+++ b/.github/workflows/assign-issue-owners.yml
@@ -19,8 +19,8 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
-      - name: Install yaml
-        run: npm install yaml@2.8.1
+      - name: Install yaml dependency used below
+        run: npm install .github/scripts
 
       - name: Parse component label and assign owners
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
diff --git a/consistent-sampling/build.gradle.kts b/consistent-sampling/build.gradle.kts
index 66fca90c9..5fc4135bb 100644
--- a/consistent-sampling/build.gradle.kts
+++ b/consistent-sampling/build.gradle.kts
@@ -9,8 +9,8 @@ otelJava.moduleName.set("io.opentelemetry.contrib.sampler")
 dependencies {
   api("io.opentelemetry:opentelemetry-sdk-trace")
   api("io.opentelemetry:opentelemetry-sdk-extension-autoconfigure-spi")
-  testImplementation("org.hipparchus:hipparchus-core:4.0.1")
-  testImplementation("org.hipparchus:hipparchus-stat:4.0.1")
+  testImplementation("org.hipparchus:hipparchus-core:4.0.2")
+  testImplementation("org.hipparchus:hipparchus-stat:4.0.2")
 }
 
 tasks {