diff --git a/.github/workflows/pyci.yml b/.github/workflows/pyci.yml
index 7edadb5..a6e903f 100644
--- a/.github/workflows/pyci.yml
+++ b/.github/workflows/pyci.yml
@@ -28,7 +28,7 @@ jobs:
       # setup-python не нужен: версию питона держит .python-version, и uv сам
       # ставит её при первом `uv sync`. Единый источник версии, поэтому раннер
       # и образ кита не могут разойтись.
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       - name: Install
         run: make install
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 5e6fd9b..6171cce 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -31,7 +31,7 @@ jobs:
           persist-credentials: false
         if: ${{ steps.release.outputs.release_created }}
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         if: ${{ steps.release.outputs.release_created }}
 
       - name: Publish to PyPI