diff --git a/.github/workflows/package_dispatch.yml b/.github/workflows/package_dispatch.yml
index 97a03d0d151..49378d9a111 100644
--- a/.github/workflows/package_dispatch.yml
+++ b/.github/workflows/package_dispatch.yml
@@ -9,7 +9,7 @@ jobs:
     if: github.event.registry_package.package_type == 'npm' && github.event.registry_package.name == 'adf-core'
     steps:
       - name: Dispatch event to monorepo
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           github-token: ${{ secrets.PAT_WRITE_PKG }}
           retries: 3
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index b257fe554f8..57b404d744c 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -462,7 +462,7 @@ jobs:
           fetch-depth: 1
       - name: PR contains forbidden labels
         id: pr-forbidden
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             const issueHasLabels = require('./scripts/github/update/check-issue-has-label.js');