diff --git a/actions/setup/js/package-lock.json b/actions/setup/js/package-lock.json
index 02f9da0f572..78c1f897314 100644
--- a/actions/setup/js/package-lock.json
+++ b/actions/setup/js/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/github-script": "github:actions/github-script#v9.0.0",
         "@actions/glob": "^0.7.0",
         "@actions/io": "^3.0.2",
-        "@github/copilot-sdk": "^1.0.7",
+        "@github/copilot-sdk": "^1.0.8",
         "@types/node": "^26.1.1",
         "@vitest/coverage-v8": "^4.1.8",
         "@vitest/ui": "^4.1.10",
@@ -750,13 +750,13 @@
       }
     },
     "node_modules/@github/copilot-sdk": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/@github/copilot-sdk/-/copilot-sdk-1.0.7.tgz",
-      "integrity": "sha512-dgCFCPfxWUkrgclQbrm7WCFzTf5RnJHsK1Lqsc3KjPBbDLPutJT0qIGg3xJ0ZELLyX0icg3TOmVczhR4HdwHxw==",
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/@github/copilot-sdk/-/copilot-sdk-1.0.8.tgz",
+      "integrity": "sha512-dbahVsyt2aX8qqtOOtmYNe40MnvzSvOSHYFFgoFK7gHZSTNz9QgOht8b1sCCJlcXaFAn/w+5qNc7CwWoCjpQ0g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@github/copilot": "^1.0.71",
+        "@github/copilot": "^1.0.73",
         "koffi": "^3.1.0",
         "vscode-jsonrpc": "^8.2.1",
         "zod": "^4.3.6"
diff --git a/actions/setup/js/package.json b/actions/setup/js/package.json
index f00b465e5fc..d11c0031b25 100644
--- a/actions/setup/js/package.json
+++ b/actions/setup/js/package.json
@@ -7,7 +7,7 @@
     "@actions/github-script": "github:actions/github-script#v9.0.0",
     "@actions/glob": "^0.7.0",
     "@actions/io": "^3.0.2",
-    "@github/copilot-sdk": "^1.0.7",
+    "@github/copilot-sdk": "^1.0.8",
     "@types/node": "^26.1.1",
     "@vitest/coverage-v8": "^4.1.8",
     "@vitest/ui": "^4.1.10",
diff --git a/actions/setup/js/safe_outputs_handlers.cjs b/actions/setup/js/safe_outputs_handlers.cjs
index 344dbff8fdb..b82062853ba 100644
--- a/actions/setup/js/safe_outputs_handlers.cjs
+++ b/actions/setup/js/safe_outputs_handlers.cjs
@@ -381,7 +381,8 @@ function createHandlers(server, appendSafeOutput, config = {}) {
       if (!dataEnabled) {
         return buildIntentErrorResponse(`${type} data is not enabled (set safe-outputs.data in workflow frontmatter)`);
       }
-      let dataSchema;
+      /** @type {Record<string, any>|null} */
+      let dataSchema = null;
       try {
         if (toolConfig?.data_schema !== undefined) {
           dataSchema = resolveDataSchema(toolConfig.data_schema, `safe-outputs.${type}.data`);