diff --git a/.github/workflows/preview-comment.yml b/.github/workflows/preview-comment.yml
index 03f75f4..f3c2fc3 100644
--- a/.github/workflows/preview-comment.yml
+++ b/.github/workflows/preview-comment.yml
@@ -35,7 +35,7 @@ jobs:
     steps:
       - name: Resolve PR number and artifact
         id: resolve
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             // Resolve workflow run (either the triggering run or a manual run_id)
@@ -207,7 +207,7 @@ jobs:
 
       - name: Create or update comment (idempotent)
         if: steps.resolve.outputs.pr != ''
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const pr = parseInt('${{ steps.resolve.outputs.pr }}', 10);