hoverkraft-tech · neilime · Apr 10, 2026 · Apr 10, 2026
diff --git a/.github/workflows/__test-action-docker-build-image.yml b/.github/workflows/__test-action-docker-build-image.yml
@@ -41,7 +41,7 @@ jobs:
           image: application-test
 
       - name: Assert - Check built image output
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGE_OUTPUT: ${{ steps.build-image.outputs.built-image }}
         with:
@@ -206,7 +206,7 @@ jobs:
           tag: "0.1.0"
 
       - name: Assert - Check built image output
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGE_OUTPUT: ${{ steps.build-image.outputs.built-image }}
         with:
@@ -309,7 +309,7 @@ jobs:
           echo "$BUILDKIT_CONFIG" | grep -F 'max-parallelism = 2'
 
       - name: Assert - Check built image output
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGE_OUTPUT: ${{ steps.build-image.outputs.built-image }}
         with:

diff --git a/.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml b/.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml
@@ -24,7 +24,7 @@ jobs:
       packages: ${{ steps.prepare-variables.outputs.packages }}
     steps:
       - id: prepare-variables
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           SECRETS_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -101,7 +101,7 @@ jobs:
     steps:
       - name: Assert - Ensure images have been built
         id: assert-built-images
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME: ${{ env.IMAGE_NAME }}
           BUILT_IMAGES: ${{ needs.arrange-build-images.outputs.built-images }}
@@ -177,7 +177,7 @@ jobs:
     needs: [arrange-prepare-variables, arrange-build-images, act]
     steps:
       - name: Assert - Ensure expected packages versions have been deleted
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TAG_TO_DELETE: ${{ needs.arrange-prepare-variables.outputs.tag }}
           PACKAGES: ${{ needs.arrange-prepare-variables.outputs.packages }}
@@ -256,7 +256,7 @@ jobs:
           persist-credentials: false
 
       - name: Delete test packages
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           PACKAGES: ${{ needs.arrange-prepare-variables.outputs.packages }}
         with:

diff --git a/.github/workflows/__test-action-get-image-metadata.yml b/.github/workflows/__test-action-get-image-metadata.yml
@@ -26,7 +26,7 @@ jobs:
           image: application-test
 
       - name: Assert - Check get image metadata ouputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_OUTPUT: ${{ steps.get-image-metadata.outputs.image }}
           LABELS_OUTPUT: ${{ steps.get-image-metadata.outputs.labels }}
@@ -141,7 +141,7 @@ jobs:
           tag: 1.0.0
 
       - name: Assert - Check get image metadata ouputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           TAGS_OUTPUT: ${{ steps.get-image-metadata.outputs.tags }}
         with:

diff --git a/.github/workflows/__test-action-get-image-name.yml b/.github/workflows/__test-action-get-image-name.yml
@@ -25,7 +25,7 @@ jobs:
           image: application-test
 
       - name: Check get image name ouputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME_OUTPUT: ${{ steps.get-image-name.outputs.image-name }}
           FULL_IMAGE_NAME_OUTPUT: ${{ steps.get-image-name.outputs.image-name-with-registry }}
@@ -70,7 +70,7 @@ jobs:
           repository: hoverkraft-tech/other-repository
 
       - name: Check get image name ouput
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME_OUTPUT: ${{ steps.get-image-name.outputs.image-name }}
           FULL_IMAGE_NAME_OUTPUT: ${{ steps.get-image-name.outputs.image-name-with-registry }}

diff --git a/.github/workflows/__test-action-helm-parse-chart-uri.yml b/.github/workflows/__test-action-helm-parse-chart-uri.yml
@@ -25,7 +25,7 @@ jobs:
           uri: "ghcr.io/my-org/my-repo/charts/application/my-repo:0.1.0"
 
       - name: Assert - Check parse chart URI ouputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           REPOSITORY_OUTPUT: ${{ steps.parse-chart-uri.outputs.repository }}
           NAME_OUTPUT: ${{ steps.parse-chart-uri.outputs.name }}

diff --git a/.github/workflows/__test-workflow-docker-build-images-building.yml b/.github/workflows/__test-workflow-docker-build-images-building.yml
@@ -54,7 +54,7 @@ jobs:
     runs-on: "ubuntu-latest"
     steps:
       - name: Check built images ouput
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGES_OUTPUT: ${{ needs.act-build-images-args-secrets.outputs.built-images }}
         with:

diff --git a/.github/workflows/__test-workflow-docker-build-images-caching.yml b/.github/workflows/__test-workflow-docker-build-images-caching.yml
@@ -27,7 +27,7 @@ jobs:
           fi
 
       - id: define-matrix
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           result-encoding: json
           script: |
@@ -137,7 +137,7 @@ jobs:
           password: ${{ github.token }}
 
       - name: Assert image and digest
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGES: ${{ needs[matrix.cache-type == 'registry' && 'act-build-images-registry' || 'act-build-images-gha' ].outputs.built-images }}
           EXPECTED_IMAGE: ghcr.io/${{ github.repository }}/${{ matrix.image-name }}
@@ -177,7 +177,7 @@ jobs:
             await exec.exec('docker', ['pull', image]);
 
       - name: Assert registry cache usage
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         if: ${{ matrix.cache-type == 'registry' }}
         env:
           EXPECTED_IMAGE: ghcr.io/${{ github.repository }}/${{ matrix.image-name }}

diff --git a/.github/workflows/__test-workflow-docker-build-images-multi-registry.yml b/.github/workflows/__test-workflow-docker-build-images-multi-registry.yml
@@ -52,7 +52,7 @@ jobs:
           password: ${{ github.token }}
 
       - name: Assert built image output and pullability
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGES: ${{ needs.act-build-images-multi-registry.outputs.built-images }}
           EXPECTED_IMAGE: ghcr.io/${{ github.repository }}/test-multi-registry-inputs
@@ -80,7 +80,7 @@ jobs:
             await exec.exec("docker", ["pull", expectedImage]);
 
       - name: Assert registry cache usage with structured inputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           EXPECTED_CACHE_IMAGE: ghcr.io/${{ github.repository }}/test-multi-registry-inputs/cache
           EXPECTED_CACHE_TAG: ${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.pull_request.number) || github.ref_name }}

diff --git a/.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml b/.github/workflows/__test-workflow-docker-build-images-platforms-and-signing.yml
@@ -27,7 +27,7 @@ jobs:
           fi
 
       - id: define-matrix
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           result-encoding: json
           script: |
@@ -131,7 +131,7 @@ jobs:
           docker pull ghcr.io/hoverkraft-tech/ci-github-container/"${IMAGE_NAME}"
 
       - name: Verify package has correct number of versions
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME: ${{ matrix.image-name }}
           SIGN: ${{ matrix.sign }}
@@ -182,7 +182,7 @@ jobs:
             );
 
       - name: Verify image manifest and platforms
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME: "${{ matrix.image-name }}:${{ matrix.tag }}"
           EXPECTED_PLATFORMS: ${{ matrix.platforms }}
@@ -278,7 +278,7 @@ jobs:
       packages: write
     steps:
       - name: Delete test packages
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGE_NAME: ${{ matrix.image-name }}
         with:

diff --git a/.github/workflows/docker-build-images.yml b/.github/workflows/docker-build-images.yml
@@ -178,7 +178,7 @@ jobs:
     runs-on: ${{ fromJson(inputs.runs-on) }}
     steps:
       - id: validate-inputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           OCI_REGISTRY_PASSWORD: ${{ secrets.oci-registry-password }}
           RUNS_ON_INPUT: ${{ inputs.runs-on }}
@@ -262,7 +262,7 @@ jobs:
             core.setOutput('images', JSON.stringify(images));
 
       - id: define-images-by-platform
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGES: ${{ steps.validate-inputs.outputs.images }}
           RUNS_ON_INPUT: ${{ inputs.runs-on }}
@@ -346,7 +346,7 @@ jobs:
             core.setOutput('images', JSON.stringify(imagesByPlatform));
 
       - id: define-artifact-name
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             function uniqid(prefix = "") {
@@ -394,7 +394,7 @@ jobs:
           private-key: ${{ secrets.build-secret-github-app-key }}
 
       - id: prepare-secret-envs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           SECRET_ENVS: ${{ matrix.image.secret-envs }}
           GITHUB_APP_TOKEN: ${{ steps.generate-token.outputs.token }}
@@ -481,7 +481,7 @@ jobs:
           artifact-name: ${{ needs.prepare-variables.outputs.artifact-name }}
 
       - id: built-images
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGES_INPUT: ${{ steps.get-matrix-outputs.outputs.result }}
         with:
@@ -528,7 +528,7 @@ jobs:
 
       - id: get-images-to-sign
         if: inputs.sign
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           BUILT_IMAGES_INPUT: ${{ steps.create-images-manifests.outputs.built-images }}
         with:

diff --git a/.github/workflows/prune-pull-requests-images-tags.yml b/.github/workflows/prune-pull-requests-images-tags.yml
@@ -55,7 +55,7 @@ jobs:
     runs-on: ${{ fromJson(inputs.runs-on) }}
     steps:
       - id: validate-inputs
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           IMAGES_INPUT: ${{ inputs.images }}
           PRUNE_CACHE_IMAGES: ${{ inputs.prune-cache-images }}

diff --git a/actions/docker/build-image/action.yml b/actions/docker/build-image/action.yml
@@ -180,7 +180,7 @@ runs:
         rm -fr ./self-actions
 
     - id: get-docker-config
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         CACHE_REGISTRY: ${{ steps.docker-setup.outputs.cache-registry }}
         CACHE_TYPE_INPUT: ${{ inputs.cache-type }}
@@ -330,7 +330,7 @@ runs:
         sbom: false # Disable sbom to avoid unknown/unknown arch
 
     - id: get-built-image
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const builtMetadata = ${{ steps.build.outputs.metadata }};

diff --git a/actions/docker/clean-images/action.yml b/actions/docker/clean-images/action.yml
@@ -31,7 +31,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         PACKAGE: ${{ inputs.package }}
       with:

diff --git a/actions/docker/create-images-manifests/action.yml b/actions/docker/create-images-manifests/action.yml
@@ -114,7 +114,7 @@ runs:
 
     - id: create-images-manifests
       name: Create images manifests and push
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const builtImagesInput = `${{ inputs.built-images }}`;
@@ -196,7 +196,7 @@ runs:
 
     - name: Get built images digest
       id: get-built-images-digest
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const builtImagesOutputs = ${{ toJson(steps.create-images-manifests.outputs.built-images) }};

diff --git a/actions/docker/get-image-metadata/action.yml b/actions/docker/get-image-metadata/action.yml
@@ -67,7 +67,7 @@ runs:
       uses: hoverkraft-tech/ci-github-common/actions/get-issue-number@4b53189212d5810f710bed89711002626977215b # 0.33.0
 
     - id: define-metadata-inputs
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         result-encoding: string
         script: |
@@ -123,7 +123,7 @@ runs:
         DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,manifest-descriptor
 
     - id: generate-outputs
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const image = `${{ steps.image-name.outputs.image-name-with-registry }}`;

diff --git a/actions/docker/prune-pull-requests-image-tags/action.yml b/actions/docker/prune-pull-requests-image-tags/action.yml
@@ -52,7 +52,7 @@ runs:
       uses: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization@4b53189212d5810f710bed89711002626977215b # 0.33.0
 
     - id: get-tags-to-delete
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         github-token: ${{ inputs.github-token }}
         script: |

diff --git a/actions/docker/setup/action.yml b/actions/docker/setup/action.yml
@@ -64,7 +64,7 @@ runs:
   using: "composite"
   steps:
     - id: resolve-oci-registries
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         BUILT_IMAGES_INPUT: ${{ inputs.built-images }}
         REGISTRY_INPUT: ${{ inputs.oci-registry }}
@@ -379,7 +379,7 @@ runs:
           });
 
     - id: detect-docker
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const dockerPath = await io.which('docker', false);

diff --git a/actions/docker/sign-images/action.yml b/actions/docker/sign-images/action.yml
@@ -42,7 +42,7 @@ runs:
     - uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
 
     - name: Sign the images with GitHub OIDC Token
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         COSIGN_EXPERIMENTAL: "1"
       with:

diff --git a/actions/helm/generate-docs/action.yml b/actions/helm/generate-docs/action.yml
@@ -41,7 +41,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare-variables
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const { existsSync, realpathSync, writeFileSync } = require('node:fs');
@@ -154,7 +154,7 @@ runs:
         key: ${{ runner.os }}-textlint-${{ hashFiles(steps.prepare-variables.outputs.textlint-config-path) }}
 
     - name: Text lint and fix files
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         NODE_PATH: ${{ github.action_path }}/node_modules
         WORKING_DIRECTORY: ${{ steps.prepare-variables.outputs.working-directory }}
@@ -174,7 +174,7 @@ runs:
           });
 
     - name: Lint Fix markdown files
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         NODE_PATH: ${{ github.action_path }}/node_modules
         WORKING_DIRECTORY: ${{ steps.prepare-variables.outputs.working-directory }}
@@ -200,7 +200,7 @@ runs:
         key: ${{ runner.os }}-prettier
 
     - name: Prettify markdown and values file
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         NODE_PATH: ${{ github.action_path }}/node_modules
         WORKING_DIRECTORY: ${{ steps.prepare-variables.outputs.working-directory }}