diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 470217d..bae1634 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Setup uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
       # Dependabot cannot regenerate requirements.lock / requirements-dev.lock,
       # so its pull requests are handled by .github/workflows/dependabot-lockfiles.yml,
       # which recompiles both files and runs this same suite against the result.
diff --git a/.github/workflows/dependabot-lockfiles.yml b/.github/workflows/dependabot-lockfiles.yml
index 501d21a..2a121ff 100644
--- a/.github/workflows/dependabot-lockfiles.yml
+++ b/.github/workflows/dependabot-lockfiles.yml
@@ -36,7 +36,7 @@ jobs:
           python-version: "3.11"
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
 
       - name: Recompile lock files
         run: |