diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml
index 390d5c8..1199342 100644
--- a/.github/workflows/prepare-release.yml
+++ b/.github/workflows/prepare-release.yml
@@ -75,7 +75,7 @@ jobs:
           fetch-depth: 0 # tags, for version-source: tags
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: ${{ inputs.python-version }}
           enable-cache: false # no caching in a job that can push (cache-poisoning surface)
diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index 3cf972d..79a065b 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -57,7 +57,7 @@ jobs:
           persist-credentials: false
           lfs: ${{ inputs.lfs }}
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: ${{ inputs.python-version }}
 
diff --git a/.github/workflows/release-on-merge.yml b/.github/workflows/release-on-merge.yml
index 6ec933d..8562d55 100644
--- a/.github/workflows/release-on-merge.yml
+++ b/.github/workflows/release-on-merge.yml
@@ -49,7 +49,7 @@ jobs:
           ref: ${{ github.event.pull_request.merge_commit_sha }}
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         if: inputs.version-source == 'pyproject'
         with:
           enable-cache: false # no caching in a job that can write (cache-poisoning surface)
diff --git a/.github/workflows/template-ci.yml b/.github/workflows/template-ci.yml
index 2b34552..d5b035d 100644
--- a/.github/workflows/template-ci.yml
+++ b/.github/workflows/template-ci.yml
@@ -22,7 +22,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/template-update.yml b/.github/workflows/template-update.yml
index db8902c..f8366d9 100644
--- a/.github/workflows/template-update.yml
+++ b/.github/workflows/template-update.yml
@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
 
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
 
       - name: Check the project is copier-managed
         run: |