diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index bf966eaed..440cd271e 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -33,7 +33,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7.0.1
       - name: Set up uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.0
       # uv installs the interpreter pinned by requires-python in pyproject.toml.
       - name: Install dependencies
         run: uv sync --group dev
diff --git a/.github/workflows/docs-quality.yml b/.github/workflows/docs-quality.yml
index fff350bfb..3bb0e9793 100644
--- a/.github/workflows/docs-quality.yml
+++ b/.github/workflows/docs-quality.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7.0.1
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.0
       # uv installs the interpreter pinned by requires-python in pyproject.toml.
       - name: Install dependencies
         run: uv sync --group dev
diff --git a/.github/workflows/lint-budget.yml b/.github/workflows/lint-budget.yml
index faee19d95..6d41d80bd 100644
--- a/.github/workflows/lint-budget.yml
+++ b/.github/workflows/lint-budget.yml
@@ -38,14 +38,14 @@ jobs:
       - name: Mint a GitHub App token
         id: app-token
         if: vars.LINT_BUDGET_APP_CLIENT_ID != ''
-        uses: actions/create-github-app-token@v3.2.0
+        uses: actions/create-github-app-token@v3.3.0
         with:
           client-id: ${{ vars.LINT_BUDGET_APP_CLIENT_ID }}
           private-key: ${{ secrets.LINT_BUDGET_APP_PRIVATE_KEY }}
       - name: Checkout repository
         uses: actions/checkout@v7.0.1
       - name: Set up uv
-        uses: astral-sh/setup-uv@v10.2.0
+        uses: astral-sh/setup-uv@v10.3.0
       - name: Install dependencies
         run: uv sync --group dev
       # Without --check the script writes the lowered counts into lint-budget.json; it still fails