diff --git a/actions/crib-deploy-environment/action.yml b/actions/crib-deploy-environment/action.yml
index 900af3187..9c132f370 100644
--- a/actions/crib-deploy-environment/action.yml
+++ b/actions/crib-deploy-environment/action.yml
@@ -327,7 +327,7 @@ runs:
         nix develop -c /bin/bash -c "devspace use namespace ${DEVSPACE_NAMESPACE} && devspace run ${{ inputs.command }} ${{ inputs.command-args }}"
 
     - name: Render notification template
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       id: render-slack-template
       if:
         failure() && inputs.crib-alert-slack-webhook != '' && inputs.send-alerts
diff --git a/actions/do-not-merge/action.yml b/actions/do-not-merge/action.yml
index 0c5b6d145..a6ede4c06 100644
--- a/actions/do-not-merge/action.yml
+++ b/actions/do-not-merge/action.yml
@@ -13,7 +13,7 @@ runs:
   using: composite
   steps:
     - name: Fail if label present
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         FAIL_LABELS: ${{ inputs.fail-labels }}
       with:
diff --git a/actions/llm-action-error-reporter/action.yml b/actions/llm-action-error-reporter/action.yml
index 016200d47..57041f964 100644
--- a/actions/llm-action-error-reporter/action.yml
+++ b/actions/llm-action-error-reporter/action.yml
@@ -196,7 +196,7 @@ runs:
 
     - name: post pr comment
       if: ${{ env.SKIP_ACTION == 'false' }}
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         GH_TOKEN: ${{ inputs.gh-token }}
         PR_NUMBER: ${{ steps.get_pr_number.outputs.pr_number }}
diff --git a/actions/md-confluence-sync/action.yml b/actions/md-confluence-sync/action.yml
index 5fe888025..190613f3c 100644
--- a/actions/md-confluence-sync/action.yml
+++ b/actions/md-confluence-sync/action.yml
@@ -59,7 +59,7 @@ runs:
 
     - name: Get default branch
       id: get_default_branch
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       with:
         script: |
           const repo = await github.rest.repos.get({
diff --git a/actions/oci-image-bump/action.yml b/actions/oci-image-bump/action.yml
index f7f818c43..14a3e6d41 100644
--- a/actions/oci-image-bump/action.yml
+++ b/actions/oci-image-bump/action.yml
@@ -193,7 +193,7 @@ runs:
     # an environment.
     - name: PR Closer
       if: ${{ inputs.pr-close-enabled == 'true' }}
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         PR_URL: ${{ steps.create-pr.outputs.pull-request-url }}
         PR_NUM: ${{ steps.create-pr.outputs.pull-request-number }}
diff --git a/actions/pr-quality-check/action.yml b/actions/pr-quality-check/action.yml
index b36f04a1e..51e76986d 100644
--- a/actions/pr-quality-check/action.yml
+++ b/actions/pr-quality-check/action.yml
@@ -158,7 +158,7 @@ runs:
       if:
         env.SHOULD_RUN == 'true' && steps.run-py.outputs.has-fix-candidates ==
         'true'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         FIX_CANDIDATES_PATH: ${{ steps.run-py.outputs.fix-candidates-path }}
       with:
@@ -191,7 +191,7 @@ runs:
       if:
         env.SHOULD_RUN == 'true' && steps.run-py.outputs.has-fix-candidates ==
         'true'
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         FP: ${{ steps.run-py.outputs.fix-candidates-fingerprint }}
       with:
@@ -230,7 +230,7 @@ runs:
         env.SHOULD_RUN == 'true' && steps.run-py.outputs.has-fix-candidates ==
         'true' && (inputs.claude-code-auto-fix-enabled != 'true' ||
         steps.check-claude.outputs.should-run-claude != 'true')
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         DETAILS: ${{ steps.build-details.outputs.details }}
         MISSING: ${{ steps.check-claude.outputs.missing }}
@@ -257,7 +257,7 @@ runs:
         steps.check-claude.outputs.should-run-claude == 'true' &&
         steps.check-fingerprint.outputs.fingerprint-changed == 'true' &&
         github.event.pull_request.head.repo.full_name == github.repository
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         DETAILS: ${{ steps.build-details.outputs.details }}
         TOTAL_DETECTED: ${{ steps.run-py.outputs.total-issues-detected }}
@@ -460,7 +460,7 @@ runs:
         steps.check-claude.outputs.should-run-claude == 'true' &&
         steps.check-fingerprint.outputs.fingerprint-changed == 'true' &&
         github.event.pull_request.head.repo.full_name == github.repository
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         PR_NUMBER_CREATED:
           ${{ steps.create-autofix-pr.outputs.pull-request-number }}
@@ -490,7 +490,7 @@ runs:
         steps.check-claude.outputs.should-run-claude == 'true' &&
         steps.check-fingerprint.outputs.fingerprint-changed == 'true' &&
         github.event.pull_request.head.repo.full_name == github.repository
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         COMMENT_ID: ${{ steps.post-comment.outputs.comment-id }}
         PR_URL: ${{ steps.create-autofix-pr.outputs.pull-request-url }}
diff --git a/actions/wait-for-workflows/action.yml b/actions/wait-for-workflows/action.yml
index 21229c26c..58c945ceb 100644
--- a/actions/wait-for-workflows/action.yml
+++ b/actions/wait-for-workflows/action.yml
@@ -33,7 +33,7 @@ runs:
   steps:
     - name: wait-for-workflows
       id: wfw
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       env:
         MAX_TIMEOUT: ${{ inputs.max-timeout }}
         POLLING_INTERVAL: ${{ inputs.polling-interval }}