diff --git a/.github/workflows/CD_production.yml b/.github/workflows/CD_production.yml
index 5a0acce62..e23ae0db2 100644
--- a/.github/workflows/CD_production.yml
+++ b/.github/workflows/CD_production.yml
@@ -54,7 +54,7 @@ jobs:
           ref: refs/tags/${{ env.DEPLOY_TAG }}
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index e2fa929e3..73ff3664c 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_testing.yml b/.github/workflows/CD_testing.yml
index 7004c5b60..04f0b7895 100644
--- a/.github/workflows/CD_testing.yml
+++ b/.github/workflows/CD_testing.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           version: "latest"
 
diff --git a/.github/workflows/forward-merge.yml b/.github/workflows/forward-merge.yml
index 0131dd7ad..c84a540c9 100644
--- a/.github/workflows/forward-merge.yml
+++ b/.github/workflows/forward-merge.yml
@@ -103,7 +103,7 @@ jobs:
       # the lockfile is re-locked (see commit 27751110). Idempotent: no
       # lockfile change -> no commit.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -166,7 +166,7 @@ jobs:
       # push. Plain push (not force) so an out-of-date checkout fails loudly
       # instead of clobbering newer hotfix commits.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index 344177723..9f559234d 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -59,7 +59,7 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Set up uv (with cache)
-        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v4
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v4
         with:
           enable-cache: true
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 72f35451e..a9a357548 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -63,7 +63,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -155,7 +155,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.0
+        uses: astral-sh/setup-uv@v8.3.2
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock