From e56dccdd686f4e06fec3fe4996ae1b7357e59096 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 17:28:52 +0000
Subject: [PATCH] build(deps): bump actions/github-script from 8.0.0 to 9.0.0

Bumps [actions/github-script](https://github.com/actions/github-script) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build.yaml          | 6 +++---
 .github/workflows/merge-back.yaml     | 2 +-
 .github/workflows/release-branch.yaml | 2 +-
 .github/workflows/release-bump.yaml   | 2 +-
 .github/workflows/tag.yaml            | 4 ++--
 5 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 9fbbeb034..2121f755e 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -415,7 +415,7 @@ jobs:
       # metadata can exceed the shell ARG_MAX limit when inherited as an env
       # var by an exec'd jq.
       - name: Export digests
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           STEPS_BAKE_OUTPUTS_METADATA: ${{ steps.bake.outputs.metadata }}
           ARCH: ${{ matrix.arch }}
@@ -687,7 +687,7 @@ jobs:
           merge-multiple: true
 
       - name: Update unstable git tag
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const script = require('./.github/scripts/update-unstable-tag.cjs');
@@ -761,7 +761,7 @@ jobs:
           persist-credentials: false
 
       - name: Remove label and comment
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILD_IMAGE_MANIFEST: ${{ needs.finalize-image.outputs.metadata }}
         with:
diff --git a/.github/workflows/merge-back.yaml b/.github/workflows/merge-back.yaml
index f6a4d4aec..6161980f7 100644
--- a/.github/workflows/merge-back.yaml
+++ b/.github/workflows/merge-back.yaml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
 
       - name: Push branch and open a PR
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           SHA: ${{ inputs.sha }}
         with:
diff --git a/.github/workflows/release-branch.yaml b/.github/workflows/release-branch.yaml
index 3a1b9f593..dfafa5d3d 100644
--- a/.github/workflows/release-branch.yaml
+++ b/.github/workflows/release-branch.yaml
@@ -134,7 +134,7 @@ jobs:
           persist-credentials: false
 
       - name: Create a new release branch
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BRANCH: release/v${{ needs.compute-version.outputs.short }}
           SHA: ${{ needs.tag.outputs.sha }}
diff --git a/.github/workflows/release-bump.yaml b/.github/workflows/release-bump.yaml
index 0f5b8b734..7862c8d43 100644
--- a/.github/workflows/release-bump.yaml
+++ b/.github/workflows/release-bump.yaml
@@ -98,7 +98,7 @@ jobs:
           persist-credentials: false
 
       - name: Update the release branch
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BRANCH: "${{ github.ref_name }}"
           SHA: ${{ needs.tag.outputs.sha }}
diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml
index 1572378ed..1e97c764b 100644
--- a/.github/workflows/tag.yaml
+++ b/.github/workflows/tag.yaml
@@ -49,7 +49,7 @@ jobs:
         run: cargo metadata --format-version 1
 
       - name: Commit and tag using the GitHub API
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         id: commit
         env:
           VERSION: ${{ inputs.version }}
@@ -61,7 +61,7 @@ jobs:
             return await script({ core, github, context });
 
       - name: Update the refs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           VERSION: ${{ inputs.version }}
           TAG_SHA: ${{ fromJSON(steps.commit.outputs.result).tag }}