diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 6672e08..57639c0 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -13,7 +13,7 @@ jobs:
       # deploy is the only other way to exercise them. The harness loads them out of the
       # YAML and runs them against a mock gh, so the tests cannot drift from the workflow.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0   # full version: setup-uv uses immutable releases
+        uses: astral-sh/setup-uv@v8.3.2   # full version: setup-uv uses immutable releases
         with:
           enable-cache: false
       - name: Workflow gather-step tests
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 50e1000..4b5f102 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -52,7 +52,7 @@ jobs:
       # python-version input it only puts uv on PATH, honouring a committed
       # .python-version if the project has one — a no-op for npx-only repos.
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.2.0   # full version: setup-uv uses immutable releases (no floating @v8)
+        uses: astral-sh/setup-uv@v8.3.2   # full version: setup-uv uses immutable releases (no floating @v8)
         with:
           # No project deps to cache here: build-command owns dependency install
           # (npx/make/tox/uv) and there are no requirements/pyproject/uv.lock files to