diff --git a/.github/workflows/CD_production.yml b/.github/workflows/CD_production.yml
index 0985f7a70..a823ae1a1 100644
--- a/.github/workflows/CD_production.yml
+++ b/.github/workflows/CD_production.yml
@@ -54,7 +54,7 @@ jobs:
           ref: refs/tags/${{ env.DEPLOY_TAG }}
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index 357dba3bc..e2fa929e3 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_testing.yml b/.github/workflows/CD_testing.yml
index c10ff6d64..7004c5b60 100644
--- a/.github/workflows/CD_testing.yml
+++ b/.github/workflows/CD_testing.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           version: "latest"
 
diff --git a/.github/workflows/forward-merge.yml b/.github/workflows/forward-merge.yml
index 3181a808a..0131dd7ad 100644
--- a/.github/workflows/forward-merge.yml
+++ b/.github/workflows/forward-merge.yml
@@ -103,7 +103,7 @@ jobs:
       # the lockfile is re-locked (see commit 27751110). Idempotent: no
       # lockfile change -> no commit.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -166,7 +166,7 @@ jobs:
       # push. Plain push (not force) so an out-of-date checkout fails loudly
       # instead of clobbering newer hotfix commits.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index b6d130a7c..344177723 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -59,7 +59,7 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Set up uv (with cache)
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v4
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v4
         with:
           enable-cache: true
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c49dc441e..72f35451e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -63,7 +63,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -155,7 +155,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.0
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock