Bump actions/github-script from 8.0.0 to 9.0.0 (#9236)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/publish-to-pkg.pr.new.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Publish
         run: npx pkg-pr-new publish --compact --json output.json --comment=off
       - name: Add metadata to output
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |

.github/workflows/update-pkg.pr.new-comment.yml

@@ -39,7 +39,7 @@ jobs:
           path: ${{ runner.temp }}/artifacts/
       - run: ls -R ${{ runner.temp }}/artifacts/
       - name: Post or update comment
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |