diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 213c21c3c..f66140447 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -41,6 +41,6 @@ repos:
       - id: gitlint
         stages: [commit-msg]
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.12.9
+    rev: 0.13.4
     hooks:
       - id: uv-lock
diff --git a/AGENTS.md b/AGENTS.md
index 96596819c..a5e08c942 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -6,7 +6,7 @@ helpers, managed as one `uv` workspace on a single shared version number.
 ## Tech Stack
 
 - **Python** — `>=3.10` is the published floor; develop on 3.14. Tests run py310–py314.
-- **uv** workspace (`uv ~= 0.12`) — one lock file at the root covers every package.
+- **uv** workspace (`uv ~= 0.13.4`) — one lock file at the root covers every package.
 - **ruff** — lint and format. Line length 120, Google docstring convention.
 - **ty** — type checking. Not mypy; `make type-check` runs `uv run ty check`.
 - **tox + pytest** — per-package test matrix. **vcrpy** records HTTP against a real backend.
diff --git a/Dockerfile b/Dockerfile
index 1bc3ed5e6..e267f21d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # (C) 2021 GoodData Corporation
 ARG PY_TAG
-FROM ghcr.io/astral-sh/uv:0.12.5 AS uv
+FROM ghcr.io/astral-sh/uv:0.13.4 AS uv
 FROM python:${PY_TAG}
 
 ARG PY_TAG
diff --git a/pyproject.toml b/pyproject.toml
index 9bf44d68a..f2b85efbd 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -18,7 +18,7 @@ dependencies = [
 ]
 
 [tool.uv]
-required-version = "~=0.12.0"
+required-version = "~=0.13.4"
 # The root only aggregates the members; it is never built or published.
 package = false
 # So a bare `uv sync` can run every make target (ruff, ty, pytest, tox). Not "all":
diff --git a/uv.lock b/uv.lock
index b926229ea..8c199c9d4 100644
--- a/uv.lock
+++ b/uv.lock
@@ -363,11 +363,11 @@ wheels = [
 
 [[package]]
 name = "certifi"
-version = "2026.7.22"
+version = "2026.10.19"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a3/c2/24167ea9858356b47a87a50d39908bfdb72ceeefe0041586e704e5376b3a/certifi-2026.7.22.tar.gz", hash = "sha256:741e2c3b351ddf169a738da9f2c048608ff7f2c5cc02f1ebc6b118bb090d5d55", size = 138112, upload-time = "2026-07-22T03:35:12.644Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0b/a7/71ac2cff56fec219ed242bb11b8efb69fcc4bec75db06fb7bfe35de520e6/certifi-2026.7.22-py3-none-any.whl", hash = "sha256:62f22742b58a1a33014a2b6b706588a8d7e2a88ae7bd1a6ebe8c992928483775", size = 136983, upload-time = "2026-07-22T03:35:11.276Z" },
+    { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" },
 ]
 
 [[package]]