diff --git a/.github/workflows/matrix.yml b/.github/workflows/matrix.yml
index 8cbe66b..fafc667 100644
--- a/.github/workflows/matrix.yml
+++ b/.github/workflows/matrix.yml
@@ -209,7 +209,7 @@ jobs:
       - name: Install the latest version of uv
         uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
-          python-version: '3.13'
+          python-version: '3.14'
       - name: install python deps
         run: uv sync
       - name: install cosign
@@ -233,7 +233,7 @@ jobs:
           pattern: "digests-${{ matrix.merges.version }}-${{ matrix.merges.flavor }}-*"
           path: digests
       - name: generate merge script
-        run: python3 ./hack/build/generate-merge-script.py
+        run: uv run ./hack/build/generate-merge-script.py
       - name: upload merge script
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
@@ -247,7 +247,7 @@ jobs:
           COSIGN_EXPERIMENTAL: "true"
         run: |
           set -euo pipefail
-          python3 hack/build/generate-sbom.py
+          uv run hack/build/generate-sbom.py
           jq -e '.bomFormat == "CycloneDX" and ((.components // []) | length > 0)' \
             sbom.cdx.json >/dev/null \
             || { echo "::error::kernel SBOM is empty or invalid"; exit 1; }