diff --git a/.github/workflows/public_pypi_x402_a2a.yml b/.github/workflows/public_pypi_x402_a2a.yml
index cf9cce3..575682b 100644
--- a/.github/workflows/public_pypi_x402_a2a.yml
+++ b/.github/workflows/public_pypi_x402_a2a.yml
@@ -25,7 +25,7 @@ jobs:
           python-version: "3.11"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
@@ -40,6 +40,6 @@ jobs:
           echo "version=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml)" >> $GITHUB_OUTPUT
 
       - name: Publish package
-        uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
         with:
           packages-dir: python/x402_a2a/dist/
diff --git a/.github/workflows/python-examples-adk-demo.yml b/.github/workflows/python-examples-adk-demo.yml
index 67d29d3..355230e 100644
--- a/.github/workflows/python-examples-adk-demo.yml
+++ b/.github/workflows/python-examples-adk-demo.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
diff --git a/.github/workflows/python-x402-a2a.yml b/.github/workflows/python-x402-a2a.yml
index 8651a81..3f334ae 100644
--- a/.github/workflows/python-x402-a2a.yml
+++ b/.github/workflows/python-x402-a2a.yml
@@ -17,7 +17,7 @@ jobs:
         uses: actions/checkout@v5
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 43d011d..2fd55e6 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository_owner == 'google-agentic-commerce'
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@v5
         with:
           token: ${{ secrets.BOT_TOKEN }}