diff --git a/.github/workflows/set-tests-statuses.yml b/.github/workflows/set-tests-statuses.yml
index 7ecfc410e2..8a48c074e1 100644
--- a/.github/workflows/set-tests-statuses.yml
+++ b/.github/workflows/set-tests-statuses.yml
@@ -29,7 +29,7 @@ jobs:
     steps:
       - name: Check for documentation only changes
         id: docs-only
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             const opts = github.rest.pulls.listFiles.endpoint.merge({
diff --git a/.github/workflows/tugboat-pr-opened.yml b/.github/workflows/tugboat-pr-opened.yml
index 1bc92b7620..2dc40bbfb9 100644
--- a/.github/workflows/tugboat-pr-opened.yml
+++ b/.github/workflows/tugboat-pr-opened.yml
@@ -30,7 +30,7 @@ jobs:
       run: jq -r .preview .tugboat_response.json > .tugboat_preview.txt
     - name: Delete Previous Preview ID
       continue-on-error: true
-      uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+      uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
       with:
         script: |
           await github.rest.actions.deleteActionsCacheByKey({
diff --git a/.github/workflows/tugboat-refresh-cache-dispatch.yml b/.github/workflows/tugboat-refresh-cache-dispatch.yml
index efba64d672..916d2268ed 100644
--- a/.github/workflows/tugboat-refresh-cache-dispatch.yml
+++ b/.github/workflows/tugboat-refresh-cache-dispatch.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Cross reference open PRs against cache keys in repo
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           github-token: ${{ secrets.LABEL_API_TOKEN }}
           script: |
diff --git a/.github/workflows/tugboat-refresh-cache-responder.yml b/.github/workflows/tugboat-refresh-cache-responder.yml
index 9186df928a..1bedfb7adc 100644
--- a/.github/workflows/tugboat-refresh-cache-responder.yml
+++ b/.github/workflows/tugboat-refresh-cache-responder.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Cleanup temporary file
         run: rm .tugboat_preview.txt
       - name: Remove refresh label
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with:
           script: |
             await github.rest.issues.removeLabel({