diff --git a/.github/workflows/congrats.yml b/.github/workflows/congrats.yml
index 0ba154b32..34fb958a8 100644
--- a/.github/workflows/congrats.yml
+++ b/.github/workflows/congrats.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Check PR author
         id: check
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.CONGRATSBOT_GITHUB_TOKEN }}
           script: |