Update GitHub Action actions/github-script to v9

[hash-worker]

This PR contains the following updates:

Package	Type	Update	Change
actions/github-script	action	major	v8.0.0 → v9

---

Release Notes

actions/github-script (actions/github-script)

v9

Compare Source

v9.0.0

Compare Source

New features:

• getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
• Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

• require('@​actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@​actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@​actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
• getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
• If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

• Add ACTIONS_ORCHESTRATION_ID to user-agent string by @​Copilot in #​695
• ci: use deployment: false for integration test environments by @​salmanmkc in #​712
• feat!: add getOctokit to script context, upgrade @​actions/github v9, @​octokit/core v7, and related packages by @​salmanmkc in #​700

New Contributors

• @​Copilot made their first contribution in #​695

Full Changelog: actions/github-script@v8.0.0...v9.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 2am on saturday"
• Automerge
  • "before 4am every weekday,every weekend"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[augmentcode]

🤖 Augment PR Summary

Summary: Updates the pinned actions/github-script used in two workflow steps from v8.0.0 to v9.0.0.
Why: Keeps GitHub Actions dependencies current while preserving the existing github-script logic (no @actions/github imports used).

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. No suggestions at this time.

Comment augment review to trigger a new review at any time.

[cursor]

PR Summary

Low Risk
Dependency-only CI workflow pin bump; embedded scripts unchanged and do not use v9 breaking APIs.

Overview
Bumps the pinned actions/github-script action from v8 to v9 in two reusable-workflow helpers that resolve the caller ref via OIDC.

The “Resolve reusable workflow ref” step in housekeeping-dependencies.yml (Renovate) and preflight-stale-approvals.yml (stale approval dismissal) now use commit 3a2844b7… instead of ed597411…. The inline scripts are unchanged: they still decode the job workflow ref from the ID token and set a checkout ref output.

No script changes were required for v9’s breaking changes (require('@actions/github'), redeclaring getOctokit), since these steps do not use those APIs.

^{Reviewed by Cursor Bugbot for commit 4ccfda9. Bugbot is set up for automated code reviews on this repo. Configure here.}