diff --git a/.github/workflows/pr-metadata.yml b/.github/workflows/pr-metadata.yml
index 0fa41941..41a0301b 100644
--- a/.github/workflows/pr-metadata.yml
+++ b/.github/workflows/pr-metadata.yml
@@ -66,7 +66,7 @@ jobs:
         run: node tools/detect-breaking-commits.ts
 
       - name: Upsert sticky PR comment
-        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           FOUND: ${{ steps.scan.outputs.found }}
           BREAKING_LIST: ${{ steps.scan.outputs.list }}