diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2a1eca6..9396458 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -26,7 +26,7 @@ jobs:
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.12"
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           # v9 changed this default to false; retain bounded cache usage.
           prune-cache: true
diff --git a/.github/workflows/hourly-product-development.yml b/.github/workflows/hourly-product-development.yml
index a612bdc..a8aeb21 100644
--- a/.github/workflows/hourly-product-development.yml
+++ b/.github/workflows/hourly-product-development.yml
@@ -319,7 +319,7 @@ jobs:
 
       - name: Set up the locked package runner
         if: steps.gate.outputs.develop == 'true'
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           prune-cache: true
 
@@ -670,7 +670,7 @@ jobs:
           python-version: "3.12"
 
       - name: Set up the independent locked package runner
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           prune-cache: true