diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1d1261a..ce53647 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.2
         with:
           version: "latest"
           python-version: "3.12"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 3beda2f..163b9f1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -24,7 +24,7 @@ jobs:
     - uses: actions/checkout@v7
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v10.2.0
+      uses: astral-sh/setup-uv@v10.3.2
       with:
         version: "latest"
         python-version: "3.12"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a11f3d4..38f1c92 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.2
         with:
           version: "latest"
 
@@ -119,7 +119,7 @@ jobs:
           path: dist/
 
       - name: Publish to TestPyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.2
+        uses: pypa/gh-action-pypi-publish@v1.14.3
         with:
           repository-url: https://test.pypi.org/legacy/
           # TestPyPI only: a re-run skips what it already has, while a duplicate on PyPI still fails.
@@ -144,4 +144,4 @@ jobs:
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.2
+        uses: pypa/gh-action-pypi-publish@v1.14.3
diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index a0ce1a2..f77bc46 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -58,7 +58,7 @@ jobs:
           fi
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.2
         with:
           version: "latest"
 
@@ -222,7 +222,7 @@ jobs:
           path: dist/
 
       - name: Publish to TestPyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.2
+        uses: pypa/gh-action-pypi-publish@v1.14.3
         with:
           repository-url: https://test.pypi.org/legacy/
           # TestPyPI only: a re-run skips what it already has, while a duplicate on PyPI still fails.
@@ -247,7 +247,7 @@ jobs:
           path: dist/
 
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.14.2
+        uses: pypa/gh-action-pypi-publish@v1.14.3
 
   verify:
     name: Verify the published version
@@ -256,7 +256,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.2
         with:
           version: "latest"
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2e2610c..81dfb6c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -111,7 +111,7 @@ jobs:
         ref: ${{ inputs.ref }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v10.2.0
+      uses: astral-sh/setup-uv@v10.3.2
       with:
         version: "latest"
         # uv reads .python-version, not the interpreter setup-python puts on PATH.
@@ -192,7 +192,7 @@ jobs:
         fi
 
     - name: Install uv
-      uses: astral-sh/setup-uv@v10.2.0
+      uses: astral-sh/setup-uv@v10.3.2
       with:
         version: "latest"
         python-version: "3.12"