From dab9a9353fd7a73a870c667c6bea8a83b5259734 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 1 May 2026 14:02:08 +0000
Subject: [PATCH] Bump actions/github-script from 8 to 9

Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/publish-static-bundle.yml | 6 +++---
 .github/workflows/release.yml               | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/publish-static-bundle.yml b/.github/workflows/publish-static-bundle.yml
index 127f17f06..0cf1eb5b6 100644
--- a/.github/workflows/publish-static-bundle.yml
+++ b/.github/workflows/publish-static-bundle.yml
@@ -73,7 +73,7 @@ jobs:
     steps:
       # Sanity check that the preview deployment is for a package that we support. This is to prevent the workflow from running in an undefined state.
       - name: Assert that preview deployment is for a known package
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         if: ${{ inputs.package-name != '@evervault/ui-components' && inputs.package-name != '@evervault/browser' }}
         with:
           script: |
@@ -115,7 +115,7 @@ jobs:
       # For Packages which have multiple paths that need to be invalidated, its easier to use the batch invalidation API than it is to programmatically pass the `--paths` flag to the CLI.
       # As a result, we split the list of paths on comma and create the expected payload (ref: https://docs.aws.amazon.com/cli/latest/reference/cloudfront/create-invalidation.html)
       - name: Prepare cloudfront payload
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         id: prepare-cloudfront-payload
         with:
           script: |
@@ -227,7 +227,7 @@ jobs:
           S3_BUCKET_VAR: ${{ inputs.s3-bucket-var-name }}
         run: aws s3 cp dist s3://${{ vars[env.S3_BUCKET_VAR] }}/ --recursive
       - name: Prepare cloudfront payload
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         id: prepare-cloudfront-payload
         with:
           script: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2b35cfe8d..ab7ea89cf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
     outputs:
       package-name: ${{ steps.get-package-name.outputs.result }}
     steps:
-      - uses: actions/github-script@v8
+      - uses: actions/github-script@v9
         id: get-package-name
         env:
           RELEASE_TAG: ${{ inputs.release-tag }}