diff --git a/.github/workflows/auto-merge-deps.yml b/.github/workflows/auto-merge-deps.yml
index c57406aed6..d8821d2bc0 100644
--- a/.github/workflows/auto-merge-deps.yml
+++ b/.github/workflows/auto-merge-deps.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
       - name: Check PR Labels
         id: check
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const labels = context.payload.pull_request.labels.map(l => l.name);
diff --git a/.github/workflows/comment-ops.yml b/.github/workflows/comment-ops.yml
index 008b453a94..dcef1f6407 100644
--- a/.github/workflows/comment-ops.yml
+++ b/.github/workflows/comment-ops.yml
@@ -184,7 +184,7 @@ jobs:
     steps:
       - name: Get PR Base SHA
         id: get_pr
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -216,7 +216,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Help Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '### 🤖 Gemini Manual Trigger Reference\n\n' +
@@ -262,7 +262,7 @@ jobs:
       source_branch: ${{ steps.get_branches.outputs.source_branch }}
     steps:
       - name: Add reaction to comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             github.rest.reactions.createForIssueComment({
@@ -273,7 +273,7 @@ jobs:
             });
       - name: Get PR Details
         id: get_branches
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gemini-coder.yml b/.github/workflows/gemini-coder.yml
index 96575c2439..37539506b5 100644
--- a/.github/workflows/gemini-coder.yml
+++ b/.github/workflows/gemini-coder.yml
@@ -674,7 +674,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Guidance Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '### ℹ️ Gemini Coder Disabled\n\n' +
diff --git a/.github/workflows/gemini-triage.yml b/.github/workflows/gemini-triage.yml
index c27e27d0e2..794e8e8aab 100644
--- a/.github/workflows/gemini-triage.yml
+++ b/.github/workflows/gemini-triage.yml
@@ -123,7 +123,7 @@ jobs:
             --output "triage_result.json"
 
       - name: Apply Triage Actions
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           ISSUE_NUMBER: ${{ steps.issue_details.outputs.number }}
           ORIGINAL_TITLE: ${{ steps.issue_details.outputs.title }}
@@ -339,7 +339,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Guidance Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '### ℹ️ Gemini Triage Disabled\n\n' +
diff --git a/.github/workflows/jules-session-manager.yml b/.github/workflows/jules-session-manager.yml
index cb5ae73e22..5d3bf453e2 100644
--- a/.github/workflows/jules-session-manager.yml
+++ b/.github/workflows/jules-session-manager.yml
@@ -179,7 +179,7 @@ jobs:
 
       - name: 'Post Session ID Comment'
         if: success() && env.COMMAND == 'new'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -195,7 +195,7 @@ jobs:
 
       - name: 'Add Reaction to Comment'
         if: success()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -207,7 +207,7 @@ jobs:
             })
       - name: 'Handle Failure'
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/pr-enrichment.yml b/.github/workflows/pr-enrichment.yml
index 1562470dd2..bbfb129c5e 100644
--- a/.github/workflows/pr-enrichment.yml
+++ b/.github/workflows/pr-enrichment.yml
@@ -274,7 +274,7 @@ jobs:
 
       - name: Update PR Description
         if: steps.check-disabled.outputs.disabled == 'false'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           PR_NUMBER: ${{ env.PR_NUMBER }}
         with:
diff --git a/.github/workflows/pr-orchestrator.yml b/.github/workflows/pr-orchestrator.yml
index 4a204ec9fd..f90e3ccf2c 100644
--- a/.github/workflows/pr-orchestrator.yml
+++ b/.github/workflows/pr-orchestrator.yml
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Welcome Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '## 👋 Welcome to HRM!\n\n' +
diff --git a/.github/workflows/pr-review-labeler.yml b/.github/workflows/pr-review-labeler.yml
index a050fccc1d..93fec2d08b 100644
--- a/.github/workflows/pr-review-labeler.yml
+++ b/.github/workflows/pr-review-labeler.yml
@@ -26,7 +26,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: ./scripts/ci/cleanup-pr-labels.sh ${{ github.event.pull_request.number }} review
       - name: Label PR based on review
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           script: |
             const { owner, repo } = context.repo;
diff --git a/.github/workflows/pr-scope-check.yml b/.github/workflows/pr-scope-check.yml
index 5d40dab96d..0e07ea5e80 100644
--- a/.github/workflows/pr-scope-check.yml
+++ b/.github/workflows/pr-scope-check.yml
@@ -88,7 +88,7 @@ jobs:
 
       - name: Add "scope:focused" label
         if: steps.analyze-files.outputs.count <= 1
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             await github.rest.issues.addLabels({
@@ -100,7 +100,7 @@ jobs:
 
       - name: Add "scope:needs-review" label and comment
         if: steps.analyze-files.outputs.count > 1
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             await github.rest.issues.addLabels({
diff --git a/.github/workflows/pr-squash.yml b/.github/workflows/pr-squash.yml
index 3232d103dd..fd1144d320 100644
--- a/.github/workflows/pr-squash.yml
+++ b/.github/workflows/pr-squash.yml
@@ -50,7 +50,7 @@ jobs:
             sudo apt-get update && sudo apt-get install -y jq
           fi
       - name: Acknowledge command
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -63,7 +63,7 @@ jobs:
 
       - name: Get PR data
         id: pr_data
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           script: |
             const response = await github.rest.pulls.get({
@@ -78,7 +78,7 @@ jobs:
 
       - name: Determine command
         id: command
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           script: |
             try {
@@ -149,7 +149,7 @@ jobs:
 
       - name: Handle Rebase Failure
         if: steps.squash_rebase.outcome == 'failure'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           script: |
             await github.rest.reactions.createForIssueComment({
@@ -170,7 +170,7 @@ jobs:
 
       - name: Success
         if: steps.squash_rebase.outcome == 'success'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           script: |
             const command = '${{ steps.command.outputs.command }}';
diff --git a/.github/workflows/reusable-create-review-issues.yml b/.github/workflows/reusable-create-review-issues.yml
index 8ff8763700..956db68254 100644
--- a/.github/workflows/reusable-create-review-issues.yml
+++ b/.github/workflows/reusable-create-review-issues.yml
@@ -53,7 +53,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Guidance Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '### ℹ️ Gemini Review Issue Creation Disabled\n\n' +
diff --git a/.github/workflows/reusable-gemini-review.yml b/.github/workflows/reusable-gemini-review.yml
index daa212af70..d974225cbe 100644
--- a/.github/workflows/reusable-gemini-review.yml
+++ b/.github/workflows/reusable-gemini-review.yml
@@ -497,7 +497,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Post Guidance Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = '### ℹ️ Gemini Review Disabled\n\n' +
@@ -527,7 +527,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Create skip check
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -546,7 +546,7 @@ jobs:
             });
 
       - name: Post Skip Comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const skipReason = '${{ needs.analyze-changes.outputs.skip-reason }}';
diff --git a/.github/workflows/reusable-gemini-tasks.yml b/.github/workflows/reusable-gemini-tasks.yml
index 7b2d484f3f..2317f31f08 100644
--- a/.github/workflows/reusable-gemini-tasks.yml
+++ b/.github/workflows/reusable-gemini-tasks.yml
@@ -49,7 +49,7 @@ jobs:
             --output "report.md"
 
       - name: Create Report Issue
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.ARI_PAT }}
           script: |
diff --git a/.github/workflows/reusable-jules-command.yml b/.github/workflows/reusable-jules-command.yml
index afaf9e0190..a07003c53f 100644
--- a/.github/workflows/reusable-jules-command.yml
+++ b/.github/workflows/reusable-jules-command.yml
@@ -191,7 +191,7 @@ jobs:
 
       - name: 'Post Session ID Comment'
         if: success() && env.COMMAND == 'new'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -207,7 +207,7 @@ jobs:
 
       - name: 'Add Reaction to Comment'
         if: success()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -219,7 +219,7 @@ jobs:
             })
       - name: 'Handle Failure'
         if: failure()
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |