diff --git a/.github/workflows/pr-ai-review.yml b/.github/workflows/pr-ai-review.yml
index bf0e2653..8ababddc 100644
--- a/.github/workflows/pr-ai-review.yml
+++ b/.github/workflows/pr-ai-review.yml
@@ -25,7 +25,7 @@ jobs:
       - name: Check authorization
         id: auth
         if: github.event_name == 'pull_request_target'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const user = context.payload.pull_request.user.login;
@@ -87,7 +87,7 @@ jobs:
           echo "number=$PR_NUM" >> "$GITHUB_OUTPUT"
 
       - name: Add agentcore-harness-reviewing label
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = parseInt('${{ steps.pr-number.outputs.number }}');
@@ -119,7 +119,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           role-to-assume: ${{ secrets.HARNESS_AWS_ROLE_ARN }}
           aws-region: us-east-1
@@ -143,7 +143,7 @@ jobs:
 
       - name: Remove agentcore-harness-reviewing label
         if: always()
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = parseInt('${{ steps.pr-number.outputs.number }}');
diff --git a/.github/workflows/pr-size.yml b/.github/workflows/pr-size.yml
index 1982c05f..792f0d72 100644
--- a/.github/workflows/pr-size.yml
+++ b/.github/workflows/pr-size.yml
@@ -13,7 +13,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Calculate PR size and apply label
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = context.payload.pull_request.number;
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index da1b6408..394e9460 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -387,7 +387,7 @@ jobs:
           git push origin "v$VERSION"
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         env:
           VERSION: ${{ steps.version.outputs.version }}
           GITHUB_REPOSITORY: ${{ github.repository }}
diff --git a/.github/workflows/slack-issue-notification.yml b/.github/workflows/slack-issue-notification.yml
index 4f2b7659..758add1d 100644
--- a/.github/workflows/slack-issue-notification.yml
+++ b/.github/workflows/slack-issue-notification.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Send issue details to Slack
-        uses: slackapi/slack-github-action@v3.0.1
+        uses: slackapi/slack-github-action@v3.0.2
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_URL }}
           webhook-type: webhook-trigger
diff --git a/.github/workflows/slack-open-prs-notification.yml b/.github/workflows/slack-open-prs-notification.yml
index 51ec8078..11641bed 100644
--- a/.github/workflows/slack-open-prs-notification.yml
+++ b/.github/workflows/slack-open-prs-notification.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - name: Get open PRs
         id: open-prs
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { data: prs } = await github.rest.pulls.list({
@@ -40,7 +40,7 @@ jobs:
             );
 
       - name: Send open PRs summary to Slack
-        uses: slackapi/slack-github-action@v3.0.1
+        uses: slackapi/slack-github-action@v3.0.2
         with:
           webhook: ${{ secrets.SLACK_OPEN_PRS_WEBHOOK_URL }}
           webhook-type: webhook-trigger
diff --git a/.github/workflows/strands-command.yml b/.github/workflows/strands-command.yml
index bfba8c80..a4e20a16 100644
--- a/.github/workflows/strands-command.yml
+++ b/.github/workflows/strands-command.yml
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check authorization
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             // Skip auth check for workflow_dispatch (manual runs)
@@ -70,7 +70,7 @@ jobs:
           fetch-depth: 0
 
       - name: Add strands-running label
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const issueNumber = ${{ inputs.issue_id || github.event.issue.number || github.event.pull_request.number }};
@@ -83,7 +83,7 @@ jobs:
 
       - name: Process inputs and build prompts
         id: process-inputs
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const processInputs = require('./.github/scripts/javascript/process-inputs.cjs');
@@ -112,7 +112,7 @@ jobs:
 
       - name: Remove strands-running label
         if: always()
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             try {