diff --git a/.github/workflows/deploy-pages.yml b/.github/workflows/deploy-pages.yml
index b2f9a614..68dde645 100644
--- a/.github/workflows/deploy-pages.yml
+++ b/.github/workflows/deploy-pages.yml
@@ -42,7 +42,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.9.9"
 
@@ -100,7 +100,7 @@ jobs:
         run: python3 -I -S tools/fetch_roadmap.py --out "$RUNNER_TEMP/roadmap-data.json"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.9.9"
           # setup-uv defaults this input to the job token, which now carries issues: read.
diff --git a/.github/workflows/sync_version.yml b/.github/workflows/sync_version.yml
index a31f1708..93f010b5 100644
--- a/.github/workflows/sync_version.yml
+++ b/.github/workflows/sync_version.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.9.9"
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 259aa724..be3c5d68 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -55,7 +55,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.9.9"