diff --git a/.github/workflows/daily-team-status.lock.yml b/.github/workflows/daily-team-status.lock.yml
index ece93c8bd35..ad8ee6ac4df 100644
--- a/.github/workflows/daily-team-status.lock.yml
+++ b/.github/workflows/daily-team-status.lock.yml
@@ -2242,8 +2242,7 @@ jobs:
         with:
           script: |
             async function main() {
-            const path = require("path");
-            const crypto = require("crypto");
+              const path = require("path");
             const redactedDomains = [];
             function getRedactedDomains() {
               return [...redactedDomains];
@@ -2438,6 +2437,7 @@ jobs:
                 return s.replace(/\b(fixes?|closes?|resolves?|fix|close|resolve)\s+#(\w+)/gi, (match, action, ref) => `\`${action} #${ref}\``);
               }
             }
+            const crypto = require("crypto");
             const TEMPORARY_ID_PATTERN = /#(aw_[0-9a-f]{12})/gi;
             function generateTemporaryId() {
               return "aw_" + crypto.randomBytes(6).toString("hex");
@@ -3854,8 +3854,8 @@ jobs:
               return lines.join("\n");
             }
             function runLogParser(options) {
-            const fs = require("fs");
-            const path = require("path");
+              const fs = require("fs");
+              const path = require("path");
               const { parseLog, parserName, supportsDirectories = false } = options;
               try {
                 const logPath = process.env.GH_AW_AGENT_OUTPUT;
@@ -4467,9 +4467,9 @@ jobs:
 
             function main() {
 
-            const fs = require("fs");
+              const fs = require("fs");
 
-            const path = require("path");
+              const path = require("path");
 
               try {
 
diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index 3a27db8a42a..2b02ea94d55 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -5985,7 +5985,7 @@ jobs:
           format: cyclonedx-json
           output-file: sbom.cdx.json
       - name: Upload SBOM artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5
         with:
           name: sbom-artifacts
           path: |
diff --git a/.prettierrc.json b/.prettierrc.json
index 1b82b780d9f..88daa3bcd38 100644
--- a/.prettierrc.json
+++ b/.prettierrc.json
@@ -8,6 +8,12 @@
   "bracketSpacing": true,
   "arrowParens": "avoid",
   "overrides": [
+    {
+      "files": "*.cjs",
+      "options": {
+        "singleQuote": false
+      }
+    },
     {
       "files": "*.json",
       "options": {
diff --git a/pkg/workflow/js/.prettierrc.json b/pkg/workflow/js/.prettierrc.json
index cf0b3a9b3a3..33322b53e55 100644
--- a/pkg/workflow/js/.prettierrc.json
+++ b/pkg/workflow/js/.prettierrc.json
@@ -8,6 +8,12 @@
   "bracketSpacing": true,
   "arrowParens": "avoid",
   "overrides": [
+    {
+      "files": "*.cjs",
+      "options": {
+        "singleQuote": false
+      }
+    },
     {
       "files": "*.json",
       "options": {