diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index acfc5ae..4e07e4e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.2
+        uses: astral-sh/setup-uv@v9.0.0
       - name: Export locked runtime dependencies
         run: uv export --frozen --no-dev --all-extras --no-emit-project --no-hashes --format requirements-txt -o audit-requirements.txt
       # The export is already a fully resolved tree, so --no-deps audits the pins
@@ -34,7 +34,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.2
+        uses: astral-sh/setup-uv@v9.0.0
       - name: Lint
         run: uv run ruff check .
       - name: Format check
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 9fdf4ed..3e3a6bb 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -22,7 +22,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
       - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.2
+        uses: astral-sh/setup-uv@v9.0.0
       - name: Build the docs site
         run: uv run --group docs mkdocs build --strict
       - name: Upload the site artifact
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 6e05736..18d2f34 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -53,7 +53,7 @@ jobs:
         with:
           python-version: "3.12"
       - name: Install uv
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v8
       - name: Build sdist + wheel
         run: uv build --out-dir dist
       - name: Publish to PyPI (OIDC trusted publishing)