diff --git a/.github/workflows/CD_production.yml b/.github/workflows/CD_production.yml
index 39c5ff6b4..c5e1e8b2d 100644
--- a/.github/workflows/CD_production.yml
+++ b/.github/workflows/CD_production.yml
@@ -54,7 +54,7 @@ jobs:
           ref: refs/tags/${{ env.DEPLOY_TAG }}
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_staging.yml b/.github/workflows/CD_staging.yml
index c1cbd243d..fa42b00da 100644
--- a/.github/workflows/CD_staging.yml
+++ b/.github/workflows/CD_staging.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           version: "latest"
 
diff --git a/.github/workflows/CD_testing.yml b/.github/workflows/CD_testing.yml
index 0ed101d15..920ad98c9 100644
--- a/.github/workflows/CD_testing.yml
+++ b/.github/workflows/CD_testing.yml
@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           version: "latest"
 
diff --git a/.github/workflows/data_migrations.yml b/.github/workflows/data_migrations.yml
index b8af98622..32def6fd7 100644
--- a/.github/workflows/data_migrations.yml
+++ b/.github/workflows/data_migrations.yml
@@ -72,7 +72,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Install uv in container
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           version: "latest"
 
diff --git a/.github/workflows/forward-merge.yml b/.github/workflows/forward-merge.yml
index ca10accf3..8b36722d2 100644
--- a/.github/workflows/forward-merge.yml
+++ b/.github/workflows/forward-merge.yml
@@ -103,7 +103,7 @@ jobs:
       # the lockfile is re-locked (see commit 27751110). Idempotent: no
       # lockfile change -> no commit.
       - name: Install uv
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -166,7 +166,7 @@ jobs:
       # push. Plain push (not force) so an out-of-date checkout fails loudly
       # instead of clobbering newer hotfix commits.
       - name: Install uv
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index 149dfc60e..f352b7410 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -59,7 +59,7 @@ jobs:
           python-version: ${{ env.PYTHON_VERSION }}
 
       - name: Set up uv (with cache)
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v4
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v4
         with:
           enable-cache: true
 
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 9f8b0fcb0..7aea89d11 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -62,7 +62,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock
@@ -153,7 +153,7 @@ jobs:
           exit 1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v9.0.0
+        uses: astral-sh/setup-uv@v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: uv.lock