diff --git a/.github/workflows/template-ci.yml b/.github/workflows/template-ci.yml
index 4017a89..cd51b1a 100644
--- a/.github/workflows/template-ci.yml
+++ b/.github/workflows/template-ci.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: "3.12"
 
@@ -209,7 +209,7 @@ jobs:
           fetch-depth: 0 # copier update diffs against the previous release tag
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/template-update.yml b/.github/workflows/template-update.yml
index 2316c52..45809fb 100644
--- a/.github/workflows/template-update.yml
+++ b/.github/workflows/template-update.yml
@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
 
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
diff --git a/.github/workflows/worker-ci.yml b/.github/workflows/worker-ci.yml
index 0b52b4c..6c45385 100644
--- a/.github/workflows/worker-ci.yml
+++ b/.github/workflows/worker-ci.yml
@@ -105,7 +105,7 @@ jobs:
       # uvx runs pre-commit without the project needing any Python setup of
       # its own; the pinned interpreter matches the scaffold's
       # default_language_version so hook environments resolve.
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         if: ${{ inputs.run-precommit }}
         with:
           python-version: "3.12"