diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 34b4211..72eafdf 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -32,23 +32,23 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@b56be562f38e0e3e712f09691a8fe930aae9db1b # 0.22.0
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@48e0c54489152b98d9e18f0454ccce120e9d0fd1 # 0.23.0
     permissions:
       contents: read
     with:
       update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }}
-      github-app-id: ${{ vars.CI_BOT_APP_ID }}
+      github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
     secrets:
       github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
 
   sync-docs:
     needs: release
     if: needs.release.outputs.artifact-id
-    uses: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml@c40c17f7d6a8090950b3ef4bfc70502707a6bb9f # 0.3.0
+    uses: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml@f3c9291760d927e6214e8d5f0a376af2d537c369 # 0.4.0
     permissions:
       contents: read
     with:
       artifact-id: ${{ needs.release.outputs.artifact-id }}
-      github-app-id: ${{ vars.CI_BOT_APP_ID }}
+      github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
     secrets:
       github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/__test-action-parse-ci-reports.yml b/.github/workflows/__test-action-parse-ci-reports.yml
index 60154f0..bcae3f6 100644
--- a/.github/workflows/__test-action-parse-ci-reports.yml
+++ b/.github/workflows/__test-action-parse-ci-reports.yml
@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@775ce0902c528062cc94141dd7d13261083b752a # 0.22.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@9d465a03741b287db18b242e0ec46990888cc6a3 # 0.23.0
     permissions:
       contents: read
       id-token: write
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 2cc80ed..3b8cf9b 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -86,7 +86,7 @@ jobs:
 
       # FIXME: superlinter should auto install required dependencies. See https://github.com/super-linter/super-linter/issues/6089.
       - id: has-prettier-plugins
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { readFileSync } = require("node:fs");
@@ -99,7 +99,7 @@ jobs:
                 return;
               }
             }
-      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@775ce0902c528062cc94141dd7d13261083b752a # 0.22.0
+      - uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@9d465a03741b287db18b242e0ec46990888cc6a3 # 0.23.0
         if: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
         with:
           working-directory: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
@@ -129,11 +129,11 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+      - uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+      - uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
         with:
           category: "/language:${{matrix.language}}"
 
@@ -151,7 +151,7 @@ jobs:
           persist-credentials: false
 
       - id: changed-files
-        uses: tj-actions/changed-files@22103cc46bda19c2b464ffe86db46df6922fd323 # v47.0.5
+        uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6
         if: ${{ inputs.lint-all == false }}
         with:
           files: |
@@ -159,7 +159,7 @@ jobs:
           dir_names_exclude_current_dir: true
 
       - id: get-files-to-lint
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           CHANGED_FILES_OUTPUT: ${{ steps.changed-files.outputs.all_changed_and_modified_files }}
           ACTION_FILES_INPUT: ${{ inputs.action-files }}
diff --git a/actions/create-and-merge-pull-request/action.yml b/actions/create-and-merge-pull-request/action.yml
index f29f9c7..de1ad26 100644
--- a/actions/create-and-merge-pull-request/action.yml
+++ b/actions/create-and-merge-pull-request/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     # FIXME: This is a workaround until this issue is resolved: https://github.com/actions/runner/issues/1348.
     - name: Prepare sibling actions
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
@@ -52,7 +52,7 @@ runs:
     - id: github-actions-bot-user
       uses: ./../self-actions/get-github-actions-bot-user
 
-    - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+    - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
       id: create-pull-request
       with:
         token: ${{ inputs.github-token }}
@@ -69,7 +69,7 @@ runs:
 
     - id: wait-for-pull-request-mergeable-by-admin
       if: steps.create-pull-request.outputs.pull-request-number && steps.create-pull-request.outputs.pull-request-operation != 'closed'
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         PULL_REQUEST_NUMBER: ${{ steps.create-pull-request.outputs.pull-request-number }}
       with:
@@ -148,7 +148,7 @@ runs:
 
     - name: Cleanup sibling actions
       if: ${{ always() }}
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
diff --git a/actions/create-or-update-comment/action.yml b/actions/create-or-update-comment/action.yml
index 5aa4033..37c7752 100644
--- a/actions/create-or-update-comment/action.yml
+++ b/actions/create-or-update-comment/action.yml
@@ -36,7 +36,7 @@ runs:
   steps:
     # FIXME: This is a workaround until this issue is resolved: https://github.com/actions/runner/issues/1348.
     - name: Prepare sibling actions
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
@@ -76,7 +76,7 @@ runs:
 
     - name: Cleanup sibling actions
       if: ${{ always() }}
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
diff --git a/actions/get-issue-number/action.yml b/actions/get-issue-number/action.yml
index 7081aa7..9378919 100644
--- a/actions/get-issue-number/action.yml
+++ b/actions/get-issue-number/action.yml
@@ -14,7 +14,7 @@ runs:
   using: "composite"
   steps:
     - id: get-issue-number
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const pullRequestNumber = context.payload.pull_request?.number;
diff --git a/actions/get-matrix-outputs/action.yml b/actions/get-matrix-outputs/action.yml
index 4f831db..7b7b95b 100644
--- a/actions/get-matrix-outputs/action.yml
+++ b/actions/get-matrix-outputs/action.yml
@@ -24,7 +24,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare-download
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_NAME_INPUT: ${{ inputs.artifact-name }}
       with:
@@ -48,7 +48,7 @@ runs:
         merge-multiple: true
 
     - id: read-artifacts
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_PATH: ${{ steps.prepare-download.outputs.artifact-path }}
         REMOVE_ARTIFACT: ${{ inputs.remove-artifact }}
diff --git a/actions/local-workflow-actions/action.yml b/actions/local-workflow-actions/action.yml
index 037778b..b21e6d2 100644
--- a/actions/local-workflow-actions/action.yml
+++ b/actions/local-workflow-actions/action.yml
@@ -63,7 +63,7 @@ runs:
         sparse-checkout: |
           ${{ inputs.actions-path }}
 
-    - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+    - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const fs = require('fs');
diff --git a/actions/parse-ci-reports/action.yml b/actions/parse-ci-reports/action.yml
index ee33872..a589bc7 100644
--- a/actions/parse-ci-reports/action.yml
+++ b/actions/parse-ci-reports/action.yml
@@ -75,13 +75,13 @@ runs:
   using: "composite"
   steps:
     - name: Setup Node.js
-      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@775ce0902c528062cc94141dd7d13261083b752a # 0.22.0
+      uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@9d465a03741b287db18b242e0ec46990888cc6a3 # 0.23.0
       with:
         working-directory: ${{ github.action_path }}
 
     - name: Parse reports
       id: parse-reports
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         NODE_PATH: ${{ github.action_path }}/node_modules
         REPORT_PATHS: ${{ inputs.report-paths }}
@@ -111,7 +111,7 @@ runs:
 
     - name: Fail if errors detected
       if: inputs.fail-on-error == 'true' && steps.parse-reports.outputs.has-errors == 'true'
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           core.setFailed('Test failures or errors detected in reports');
diff --git a/actions/repository-owner-is-organization/action.yml b/actions/repository-owner-is-organization/action.yml
index 3f2fc74..304c610 100644
--- a/actions/repository-owner-is-organization/action.yml
+++ b/actions/repository-owner-is-organization/action.yml
@@ -20,7 +20,7 @@ runs:
   using: "composite"
   steps:
     - id: check-org
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         github-token: ${{ inputs.github-token }}
         script: |
diff --git a/actions/set-matrix-output/action.yml b/actions/set-matrix-output/action.yml
index 09fd0c2..90eac54 100644
--- a/actions/set-matrix-output/action.yml
+++ b/actions/set-matrix-output/action.yml
@@ -23,7 +23,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare-upload
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_NAME_INPUT: ${{ inputs.artifact-name }}
         MATRIX_VALUE: ${{ inputs.value }}
@@ -48,7 +48,7 @@ runs:
           core.setOutput("artifact-path", artifactPath);
           writeFileSync(artifactPath, process.env.MATRIX_VALUE ?? "");
 
-    - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ steps.prepare-upload.outputs.artifact-unique-name }}
         path: ${{ steps.prepare-upload.outputs.artifact-path }}
diff --git a/actions/slugify/action.yml b/actions/slugify/action.yml
index e83dd9a..70845b1 100644
--- a/actions/slugify/action.yml
+++ b/actions/slugify/action.yml
@@ -19,7 +19,7 @@ runs:
   using: "composite"
   steps:
     - id: slugifier
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         SLUGIFY_INPUT: ${{ inputs.value }}
       with:
diff --git a/actions/working-directory/action.yml b/actions/working-directory/action.yml
index 30c81fc..3f567de 100644
--- a/actions/working-directory/action.yml
+++ b/actions/working-directory/action.yml
@@ -27,7 +27,7 @@ runs:
   using: "composite"
   steps:
     - id: working-directory
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         WORKING_DIRECTORY_INPUT: ${{ inputs.working-directory }}
         ENFORCE_PATH_IN_WORKSPACE_INPUT: ${{ inputs.enforce-path-in-workspace }}