diff --git a/.github/workflows/automoderator.yaml b/.github/workflows/automoderator.yaml
index 85b1edd..35834b1 100644
--- a/.github/workflows/automoderator.yaml
+++ b/.github/workflows/automoderator.yaml
@@ -20,7 +20,7 @@ jobs:
       - name: Redact suspicious links
         # Adapted from "Comment-Filter" by Martin Leduc (MIT)
         # https://github.com/DecimalTurn/Comment-Filter
-        uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const comment = context.payload.comment
diff --git a/.github/workflows/community-pr-label.yml b/.github/workflows/community-pr-label.yml
index 54c1493..359bac2 100644
--- a/.github/workflows/community-pr-label.yml
+++ b/.github/workflows/community-pr-label.yml
@@ -25,7 +25,7 @@ jobs:
           egress-policy: audit
 
       - name: Label community PRs
-        uses: actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             // Update this list when core team membership changes.