diff --git a/.github/workflows/code-analysis.yml b/.github/workflows/code-analysis.yml
index de979292c..7c3f11a49 100644
--- a/.github/workflows/code-analysis.yml
+++ b/.github/workflows/code-analysis.yml
@@ -23,7 +23,7 @@ jobs:
           python-version: '3.12'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Install analysis dependencies
         working-directory: analysis
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index fed7fdaf0..056dac1b0 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -396,7 +396,7 @@ jobs:
           auto-activate: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Run Integration Tests (Linux)
         if: runner.os == 'Linux'
@@ -423,7 +423,7 @@ jobs:
 
       - name: Upload Windows integration-test failure diagnostics
         if: ${{ failure() && steps.windows-integration-tests.outcome == 'failure' }}
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: integration-${{ matrix.os }}-${{ matrix.python-version }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}\vsct-diag
diff --git a/.github/workflows/push-check.yml b/.github/workflows/push-check.yml
index e8f933bb8..473332a15 100644
--- a/.github/workflows/push-check.yml
+++ b/.github/workflows/push-check.yml
@@ -347,7 +347,7 @@ jobs:
           auto-activate: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@18d369b23da25a81e9458561248e1aafff6a70fa # v10.3.1
+        uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
 
       - name: Run Integration Tests (Linux)
         if: runner.os == 'Linux'