diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d34ec88c1..dd9fdce06 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -140,7 +140,7 @@ jobs:
     - name: Fix file permission
       run: chmod +x micropython/mpy-cross/build/mpy-cross
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
+      uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
       with:
         version: "0.12.24"
     - run: uv sync --locked --only-group build
@@ -214,7 +214,7 @@ jobs:
     - name: Fix file permission
       run: chmod +x micropython/mpy-cross/build/mpy-cross
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
+      uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
       with:
         version: "0.12.24"
     - run: uv sync --locked --only-group build
@@ -237,7 +237,7 @@ jobs:
       with:
         packages: doxygen graphviz
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
+      uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
       with:
         version: "0.12.24"
     - run: uv sync --locked --only-group build
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index ded6a2813..df17c3a5e 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -38,7 +38,7 @@ jobs:
       with:
         submodules: true
     - name: Install uv
-      uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
+      uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
       with:
         version: "0.12.24"
     - run: uv sync --locked --only-group lint
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff349d1f8..1a5a444f9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
           packages: gcc-arm-none-eabi libnewlib-arm-none-eabi
           no-install-recommends: 'true'
       - name: Install uv
-        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e  # v10.3.2
         with:
           version: "0.12.24"
           # don't restore caches into a job that has access to release secrets