diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ba9cb9c4..fbf93df1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
     - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         persist-credentials: false
-    - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+    - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
       with:
         enable-cache: true
     - run: uv sync --all-groups
diff --git a/.github/workflows/plugin-compat.yml b/.github/workflows/plugin-compat.yml
index 25697c68..f20aca26 100644
--- a/.github/workflows/plugin-compat.yml
+++ b/.github/workflows/plugin-compat.yml
@@ -51,7 +51,7 @@ jobs:
         # Full history so the PR base is available to diff against.
         fetch-depth: 0
         persist-credentials: false
-    - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+    - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
       with:
         enable-cache: true
     - run: uv sync --all-groups
diff --git a/.github/workflows/settings-verify.yml b/.github/workflows/settings-verify.yml
index badf86b9..0dfb4974 100644
--- a/.github/workflows/settings-verify.yml
+++ b/.github/workflows/settings-verify.yml
@@ -53,7 +53,7 @@ jobs:
         # Full history so the PR base is available to diff against.
         fetch-depth: 0
         persist-credentials: false
-    - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+    - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
       with:
         enable-cache: true
     - run: uv sync --all-groups