diff --git a/.github/workflows/auto-integration-pr.yml b/.github/workflows/auto-integration-pr.yml
index 8ae9aebcb..f5fa797db 100644
--- a/.github/workflows/auto-integration-pr.yml
+++ b/.github/workflows/auto-integration-pr.yml
@@ -56,7 +56,7 @@ jobs:
 
       - name: Get integration app token
         id: integration_token
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             global["fetch"] = fetch
@@ -80,7 +80,7 @@ jobs:
             core.setOutput('app_token', token)
 
       - name: Integration config
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         id: integration-config
         # workflow_dispatch event used for manual trigger workflow
         if: startsWith(github.event.comment.body, '/integrate') || github.event_name == 'workflow_dispatch'
@@ -210,7 +210,7 @@ jobs:
           delete-branch: true
 
       - name: Link integration pr
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             const BOT_NAME = "AutoIntegrationPr Bot"
diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml
index 6a6624740..3c64f023e 100644
--- a/.github/workflows/auto-tag.yml
+++ b/.github/workflows/auto-tag.yml
@@ -95,7 +95,7 @@ jobs:
           echo "EXISTS=$(if [ $(git tag -l ${{ steps.get-tag.outputs.TAG }}) ]; then echo yes; else echo no; fi)" >> $GITHUB_OUTPUT
 
       - name: create comment
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{ github.token }}
           script: |
@@ -140,7 +140,7 @@ jobs:
       - name: Get token using github-script
         id: get-token
         if: github.event.pull_request.merged
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             global["fetch"] = fetch
@@ -173,7 +173,7 @@ jobs:
 
       - name: Create tag
         if: github.event.pull_request.merged
-        uses: actions/github-script@v5
+        uses: actions/github-script@v7
         with:
           github-token: ${{ steps.get-token.outputs.app_token }}
           script: |
diff --git a/.github/workflows/chatOps.yml b/.github/workflows/chatOps.yml
index 7f06f598d..71a71200e 100644
--- a/.github/workflows/chatOps.yml
+++ b/.github/workflows/chatOps.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       # assign to someone
       - name: assign
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/assign')
         env:
           COMMENT_BODY: ${{ github.event.comment.body }}
@@ -29,7 +29,7 @@ jobs:
             })
       # request someone to review
       - name: review
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/review')
         env:
           COMMENT_BODY: ${{ github.event.comment.body }}
@@ -52,7 +52,7 @@ jobs:
             });
       # !deprecated add approve label
       - name: "approve"
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/+1')
         with:
           script: |
@@ -74,7 +74,7 @@ jobs:
 
       # retrigger checks
       - name: check
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/check')
         env:
           COMMENT_BODY: ${{ github.event.comment.body }}
@@ -121,7 +121,7 @@ jobs:
           startsWith(github.event.comment.body, '/merge') || startsWith(github.event.comment.body, '/check') ||
           startsWith(github.event.comment.body, '/forcemerge')
         id: get-token
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             global["fetch"] = fetch
@@ -146,7 +146,7 @@ jobs:
 
       # retrigger obs build webhook
       - name: check obs
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/check')
         id: check-obs
         env:
@@ -247,7 +247,7 @@ jobs:
             }
 
       - name: check obs comment
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: |
           startsWith(github.event.comment.body, '/check obs') && steps.check-obs.outputs.retriggered == 'true'
         with:
@@ -284,7 +284,7 @@ jobs:
             }
 
       - name: disable merge
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/merge') && github.repository_owner != 'linuxdeepin'
         with:
           github-token: ${{ steps.get-token.outputs.app_token }}
@@ -297,7 +297,7 @@ jobs:
             })
 
       - name: merge
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/merge') && github.repository_owner == 'linuxdeepin'
         with:
           github-token: ${{ steps.get-token.outputs.app_token }}
@@ -343,7 +343,7 @@ jobs:
             });
 
       - name: forcemerge
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         if: startsWith(github.event.comment.body, '/forcemerge') && github.repository_owner == 'linuxdeepin'
         with:
           github-token: ${{ steps.get-token.outputs.app_token }}
@@ -395,7 +395,7 @@ jobs:
       - name: Get integration app token
         id: pr
         if: startsWith(github.event.comment.body, '/integrate')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             const response = await github.rest.pulls.get({
diff --git a/.github/workflows/transfer-issues-func.yml b/.github/workflows/transfer-issues-func.yml
index 1b32ecd51..1385c9d0f 100644
--- a/.github/workflows/transfer-issues-func.yml
+++ b/.github/workflows/transfer-issues-func.yml
@@ -24,7 +24,7 @@ jobs:
           npm install @octokit/auth-app@6.1.1
       - name: Get token using github-script
         id: get-token
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           script: |
             global["fetch"] = fetch
@@ -47,7 +47,7 @@ jobs:
             });
             core.setOutput('app_token', token)
       - name: transfer issues
-        uses: actions/github-script@v5
+        uses: actions/github-script@v7
         with:
           github-token: ${{ steps.get-token.outputs.app_token }}
           script: |