diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 851a7a1..958c0da 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
           python-version: "3.13"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v10.0.0
+        uses: astral-sh/setup-uv@v10.0.1
 
       - name: Run CI gate sequence
         run: make ci
diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 8107d9f..8fd1e8f 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -28,6 +28,6 @@ jobs:
       # The token is not used for any external cloud auth.
       id-token: write
     if: ${{ github.event_name == 'workflow_dispatch' || github.actor == 'dependabot[bot]' }}
-    uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@57a33fa65e329db7edc81ece661f1a2e1d39868f
+    uses: leynos/shared-actions/.github/workflows/dependabot-automerge.yml@f4764bea8d813b1a8f7ebc37a44907d3c3b1e0e4
     with:
       pull-request-number: ${{ inputs.pull-request-number || github.event.pull_request.number }}
diff --git a/.github/workflows/mutation-testing.yml b/.github/workflows/mutation-testing.yml
index 036f9d5..f75cd7f 100644
--- a/.github/workflows/mutation-testing.yml
+++ b/.github/workflows/mutation-testing.yml
@@ -18,7 +18,7 @@ jobs:
     permissions:
       contents: read
       id-token: write # OIDC workflow-source resolution
-    uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@57a33fa65e329db7edc81ece661f1a2e1d39868f
+    uses: leynos/shared-actions/.github/workflows/mutation-mutmut.yml@f4764bea8d813b1a8f7ebc37a44907d3c3b1e0e4
     with:
       # Mutable Python source lives in hooks/, not the src/ default.
       paths: "hooks/"