diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 175af3f..ca00089 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -30,7 +30,7 @@ jobs:
       - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: "3.14"
-      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2  # v10.3.3
         with:
           enable-cache: true           # keyed by uv.lock
           activate-environment: true   # .venv/bin on PATH for the steps that follow
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index c2f89b0..6361744 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
         with:
           python-version: "3.14"
-      - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2  # v10.3.3
         with:
           enable-cache: true           # keyed by uv.lock
           activate-environment: true   # .venv/bin on PATH for the steps that follow