diff --git a/.github/workflows/_dist.yml b/.github/workflows/_dist.yml
index 71b50aa0..2a3f1934 100644
--- a/.github/workflows/_dist.yml
+++ b/.github/workflows/_dist.yml
@@ -13,7 +13,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.2
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Build sdist and wheel
         run: >
diff --git a/.github/workflows/_docs.yml b/.github/workflows/_docs.yml
index acc52652..af6145a3 100644
--- a/.github/workflows/_docs.yml
+++ b/.github/workflows/_docs.yml
@@ -21,7 +21,7 @@ jobs:
         run: sudo apt-get install graphviz
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.2
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Build docs
         run: uv run --locked tox -e docs
diff --git a/.github/workflows/_example.yml b/.github/workflows/_example.yml
index dcf9e359..5d911de1 100644
--- a/.github/workflows/_example.yml
+++ b/.github/workflows/_example.yml
@@ -15,7 +15,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.2
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Regenerate example
         run: |
diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index 59b92929..bd3a5e2b 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -23,7 +23,7 @@ jobs:
       - name: Create GitHub Release
         # We pin to the SHA, not the tag, for security reasons.
         # https://docs.github.com/en/actions/learn-github-actions/security-hardening-for-github-actions#using-third-party-actions
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3.0.4
         with:
           prerelease: ${{ contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc') }}
           files: "*"
diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index b563e8b0..5097f774 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.2
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Run tests
         run: uv run --locked tox -e tests
diff --git a/.github/workflows/_tox.yml b/.github/workflows/_tox.yml
index c259f52a..ecf628d5 100644
--- a/.github/workflows/_tox.yml
+++ b/.github/workflows/_tox.yml
@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.2
+        uses: astral-sh/setup-uv@v10.3.3
 
       - name: Run tox
         run: uv run --locked tox -e ${{ inputs.tox }}