diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 93d25ac..2fde7db 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Install uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - name: Build site
         run: uv run zensical build
       - name: Upload Pages artifact
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 5bb4dab..394b71a 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -19,7 +19,7 @@ jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           ref: ${{ env.GIT_REF }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 42c3d49..e364ecf 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -23,7 +23,7 @@ jobs:
           ref: ${{ github.event.release.tag_name }}
           fetch-depth: 0 # full history + tags so setuptools-scm derives the version
       - name: Install uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - name: Build sdist + wheel
         run: uv build
       - name: Store the distribution packages
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7abb2ba..abad3d5 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -43,7 +43,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Install uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - name: Start Postgres services
         # A mypy env reads the tree and never connects, and `bench_harness` installs no
         # `django_absurd.pg_cron`, so neither pays for the extension image.
@@ -124,7 +124,7 @@ jobs:
         with:
           fetch-depth: 0 # full history + tags so setuptools-scm can derive the version
       - name: Install uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
       - name: Build sdist + wheel
         run: uv build
       - name: Check distribution metadata