diff --git a/.github/workflows/integration-tests.yaml b/.github/workflows/integration-tests.yaml
index aa6628db..d234aa40 100644
--- a/.github/workflows/integration-tests.yaml
+++ b/.github/workflows/integration-tests.yaml
@@ -184,12 +184,12 @@ jobs:
         git checkout --detach "${PR_HEAD_SHA}"
 
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
       with:
         python-version: "3.12"
 
     - name: Set up uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     # Skip cache writes on /gcbrun (`issue_comment` runs in main's cache scope).
     - name: Cache uv dependencies
diff --git a/.github/workflows/lint-readme.yaml b/.github/workflows/lint-readme.yaml
index 7411f162..216b099e 100644
--- a/.github/workflows/lint-readme.yaml
+++ b/.github/workflows/lint-readme.yaml
@@ -37,12 +37,12 @@ jobs:
         persist-credentials: false
 
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
       with:
         python-version: "3.12"
 
     - name: Set up uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Install dependencies
       run: uv pip install --system build twine
diff --git a/.github/workflows/pyink.yaml b/.github/workflows/pyink.yaml
index 5630d934..e781acb8 100644
--- a/.github/workflows/pyink.yaml
+++ b/.github/workflows/pyink.yaml
@@ -37,12 +37,12 @@ jobs:
         persist-credentials: false
 
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
       with:
         python-version: "3.12"
 
     - name: Set up uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Install pyink
       run: uv pip install --system 'pyink~=26.0'
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4e1a535f..d296b312 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -45,12 +45,12 @@ jobs:
         persist-credentials: false
 
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
       with:
         python-version: "3.12"
 
     - name: Set up uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
       with:
         enable-cache: false
 
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 3225ea3f..4205d67c 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -49,12 +49,12 @@ jobs:
         persist-credentials: false
 
     - name: Setup Python
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
       with:
         python-version: "3.12"
 
     - name: Set up uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
+      uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
 
     - name: Cache uv dependencies
       uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0