diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ce00e09..21283ad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - run: uv run --no-project --with pyyaml==6.0.3 python scripts/check_repository.py
       - run: python3 -m unittest discover -s tests -v
   ci-ok:
diff --git a/.github/workflows/conventions.yml b/.github/workflows/conventions.yml
index 421d018..9d30a34 100644
--- a/.github/workflows/conventions.yml
+++ b/.github/workflows/conventions.yml
@@ -21,7 +21,7 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+      - uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
       - name: Every commit in the PR is a conventional commit
         env:
           BASE: ${{ github.event.pull_request.base.sha }}