diff --git a/.github/workflows/deploy-pages.yml b/.github/workflows/deploy-pages.yml
index d566e2c..c1e21ed 100644
--- a/.github/workflows/deploy-pages.yml
+++ b/.github/workflows/deploy-pages.yml
@@ -42,7 +42,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           version: "0.9.9"
 
@@ -106,7 +106,7 @@ jobs:
         run: python3 -I -S tools/fetch_roadmap.py --out "$RUNNER_TEMP/roadmap-data.json"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           version: "0.9.9"
           # setup-uv defaults this input to the job token, which now carries issues: read.
diff --git a/.github/workflows/sync_version.yml b/.github/workflows/sync_version.yml
index a31f170..0d8cf48 100644
--- a/.github/workflows/sync_version.yml
+++ b/.github/workflows/sync_version.yml
@@ -33,7 +33,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           version: "0.9.9"
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 259aa72..28840e1 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -55,7 +55,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           version: "0.9.9"