From 179da834b1223a2c00fb957e8e6d70413c32be45 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 23 Aug 2026 12:05:13 +0000
Subject: [PATCH] Bump actions/github-script from 7.1.0 to 9.0.0

Bumps [actions/github-script](https://github.com/actions/github-script) from 7.1.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/f28e40c7f34bde8b3046d885e986cb6290c5673b...3a2844b7e9c422d3c10d287c895573f7108da1b3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/agent-files-detect.yaml  |  2 +-
 .github/workflows/agent-files-enforce.yaml | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/agent-files-detect.yaml b/.github/workflows/agent-files-detect.yaml
index 58411638b..8e8a10e66 100644
--- a/.github/workflows/agent-files-detect.yaml
+++ b/.github/workflows/agent-files-detect.yaml
@@ -148,7 +148,7 @@ jobs:
       statuses: write
     steps:
       - name: Post success status
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             await github.rest.repos.createCommitStatus({
diff --git a/.github/workflows/agent-files-enforce.yaml b/.github/workflows/agent-files-enforce.yaml
index 2545ec42f..884b2b3d2 100644
--- a/.github/workflows/agent-files-enforce.yaml
+++ b/.github/workflows/agent-files-enforce.yaml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - name: Resolve PR number from workflow run
         id: resolve
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const run = context.payload.workflow_run;
@@ -59,7 +59,7 @@ jobs:
       # the workflow files, the artifact cannot be trusted. Check independently via API.
       - name: Check for workflow file changes
         id: workflow-check
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PR_NUMBER: ${{ needs.resolve-pr.outputs.pr_number }}
         with:
@@ -135,7 +135,7 @@ jobs:
 
       - name: Delete detection artifact
         if: steps.download.outcome == 'success'
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const runId = ${{ github.event.workflow_run.id }};
@@ -155,7 +155,7 @@ jobs:
 
       - name: Add review label
         if: steps.decide.outputs.label_action == 'add'
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PR_NUMBER: ${{ needs.resolve-pr.outputs.pr_number }}
         with:
@@ -208,7 +208,7 @@ jobs:
       # agent files — e.g. the PR reverted its earlier agent-file changes.
       - name: Remove review label
         if: steps.decide.outputs.label_action == 'remove'
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PR_NUMBER: ${{ needs.resolve-pr.outputs.pr_number }}
         with:
@@ -245,7 +245,7 @@ jobs:
         id: pr
         env:
           RESOLVE_PR_NUMBER: ${{ needs.resolve-pr.outputs.pr_number }}
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             if (context.eventName === 'workflow_run') {
@@ -265,7 +265,7 @@ jobs:
           PR_NUMBER: ${{ steps.pr.outputs.number }}
           LABEL_JOB_RESULT: ${{ needs.label-protected-changes.result }}
           LABEL_ACTION: ${{ needs.label-protected-changes.outputs.label_action }}
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const label = process.env.REVIEW_LABEL;