diff --git a/.github/workflows/branch-cleanup.yml b/.github/workflows/branch-cleanup.yml
index d80e1a5..1e8516a 100644
--- a/.github/workflows/branch-cleanup.yml
+++ b/.github/workflows/branch-cleanup.yml
@@ -25,7 +25,7 @@ jobs:
     steps:
       - name: Purge Head Branch on PR Merge
         if: github.event_name == 'pull_request' && github.event.pull_request.merged == true
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const headRef = context.payload.pull_request.head.ref;
@@ -69,7 +69,7 @@ jobs:
 
       - name: Scheduled Stale Merged Branches Sweep
         if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const protectedBranches = [