diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index e2e5d6f..cfadbaf 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -44,7 +44,7 @@ jobs:
         python-version: "3.15"
 
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Sync dependencies
       run: uv sync --locked
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index ac2aff1..da50163 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -48,7 +48,7 @@ jobs:
         python-version: "3.15"
 
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     # Same command Read the Docs runs; a broken link or docstring reference
     # fails the PR here instead of the published site.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 1e69328..61da57f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -32,7 +32,7 @@ jobs:
         python-version: "3.15"
 
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Sync dependencies
       run: uv sync --locked --group dev
diff --git a/.github/workflows/lowest.yml b/.github/workflows/lowest.yml
index e0a0d54..537066a 100644
--- a/.github/workflows/lowest.yml
+++ b/.github/workflows/lowest.yml
@@ -48,7 +48,7 @@ jobs:
         python-version: "3.10"
 
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Sync dependencies
       run: uv sync --locked
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 856cee1..462b284 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -99,7 +99,7 @@ jobs:
           python-version: "3.15"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+        uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
       # The extras are redundant — the dev group already pins redis, pymemcache
       # and orjson — but they are named anyway. This is the one job where
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ec47364..583a2b9 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -51,7 +51,7 @@ jobs:
         python-version: ${{ matrix.python-version }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Sync dependencies
       run: uv sync --locked