diff --git a/.github/workflows/__call-codeql.yml b/.github/workflows/__call-codeql.yml
index bab4f559..0fad0ff4 100644
--- a/.github/workflows/__call-codeql.yml
+++ b/.github/workflows/__call-codeql.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Get repo languages
         id: lang
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             // CodeQL supports the following:
@@ -152,7 +152,7 @@ jobs:
 
       - name: Continue
         id: continue
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             // if matrix['include'] is an empty list return false, otherwise true
diff --git a/.github/workflows/__call-common-lint.yml b/.github/workflows/__call-common-lint.yml
index 9aeb46ac..42749a65 100644
--- a/.github/workflows/__call-common-lint.yml
+++ b/.github/workflows/__call-common-lint.yml
@@ -28,7 +28,7 @@ jobs:
 
       - name: Get changed files
         id: changed_files
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const opts = github.rest.pulls.listFiles.endpoint.merge({
diff --git a/.github/workflows/__call-release-notifier.yml b/.github/workflows/__call-release-notifier.yml
index 2a9b25bc..22457c14 100644
--- a/.github/workflows/__call-release-notifier.yml
+++ b/.github/workflows/__call-release-notifier.yml
@@ -26,7 +26,7 @@ jobs:
         env:
           TOPIC: replicator-release-notifications
         id: check-label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const topic = process.env.TOPIC;
@@ -46,7 +46,7 @@ jobs:
       - name: Check if latest GitHub release
         id: check-release
         if: steps.check-label.outputs.hasTopic == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const latestRelease = await github.rest.repos.getLatestRelease({
diff --git a/.github/workflows/__call-update-docs.yml b/.github/workflows/__call-update-docs.yml
index 407fd7e4..f5a818ed 100644
--- a/.github/workflows/__call-update-docs.yml
+++ b/.github/workflows/__call-update-docs.yml
@@ -56,7 +56,7 @@ jobs:
         if: >-
           github.event_name == 'release' &&
           github.event.action == 'edited'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const latestRelease = await github.rest.repos.getLatestRelease({
diff --git a/.github/workflows/__call-update-flathub-repo.yml b/.github/workflows/__call-update-flathub-repo.yml
index 435d9e9a..00dd08e7 100644
--- a/.github/workflows/__call-update-flathub-repo.yml
+++ b/.github/workflows/__call-update-flathub-repo.yml
@@ -26,7 +26,7 @@ jobs:
         id: check-label
         env:
           TOPIC: flathub-pkg
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const topic = process.env.TOPIC;
@@ -46,7 +46,7 @@ jobs:
       - name: Check if latest GitHub release
         id: check-release
         if: steps.check-label.outputs.hasTopic == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const latestRelease = await github.rest.repos.getLatestRelease({
diff --git a/.github/workflows/__call-update-homebrew-repo.yml b/.github/workflows/__call-update-homebrew-repo.yml
index 16379169..3260b5b8 100644
--- a/.github/workflows/__call-update-homebrew-repo.yml
+++ b/.github/workflows/__call-update-homebrew-repo.yml
@@ -24,7 +24,7 @@ jobs:
         id: check-label
         env:
           TOPIC: homebrew-pkg
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const topic = process.env.TOPIC;
diff --git a/.github/workflows/__call-update-pacman-repo.yml b/.github/workflows/__call-update-pacman-repo.yml
index 1c31f1de..9ecccdf3 100644
--- a/.github/workflows/__call-update-pacman-repo.yml
+++ b/.github/workflows/__call-update-pacman-repo.yml
@@ -24,7 +24,7 @@ jobs:
         id: check-label
         env:
           TOPIC: pacman-pkg
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const topic = process.env.TOPIC;
@@ -45,7 +45,7 @@ jobs:
         id: check-release
         if: >-
           steps.check-label.outputs.hasTopic == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const latestRelease = await github.rest.repos.getLatestRelease({
diff --git a/.github/workflows/__call-update-winget-repo.yml b/.github/workflows/__call-update-winget-repo.yml
index f3623009..bc4dd69b 100644
--- a/.github/workflows/__call-update-winget-repo.yml
+++ b/.github/workflows/__call-update-winget-repo.yml
@@ -26,7 +26,7 @@ jobs:
         id: check-label
         env:
           TOPIC: winget-pkg
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const topic = process.env.TOPIC;
diff --git a/.github/workflows/__issues-stale.yml b/.github/workflows/__issues-stale.yml
index c38ee6c5..4d55767d 100644
--- a/.github/workflows/__issues-stale.yml
+++ b/.github/workflows/__issues-stale.yml
@@ -23,7 +23,7 @@ jobs:
       # get all repos in this org
       - name: Get repos
         id: set-matrix
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const opts = github.rest.repos.listForOrg.endpoint.merge({ org: context.repo.owner });
diff --git a/.github/workflows/__update-cpm-cmake.yml b/.github/workflows/__update-cpm-cmake.yml
index a22e2b6b..29df72ce 100644
--- a/.github/workflows/__update-cpm-cmake.yml
+++ b/.github/workflows/__update-cpm-cmake.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Get repos
         id: set-matrix
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const opts = github.rest.repos.listForOrg.endpoint.merge({ org: context.repo.owner });