diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 7534623..add0d78 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -42,7 +42,7 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.x"
-      - uses: astral-sh/setup-uv@v10
+      - uses: astral-sh/setup-uv@v10.2.0
 
       # Every hook brings its own environment except the language: system
       # ones; of those only dependency-freshness imports third-party code
diff --git a/.github/workflows/python-tests.yml b/.github/workflows/python-tests.yml
index 5d8b02d..5b98ad4 100644
--- a/.github/workflows/python-tests.yml
+++ b/.github/workflows/python-tests.yml
@@ -20,7 +20,7 @@ jobs:
 
       # uv with a cached wheel store installs requirements.txt in seconds;
       # plain pip took ~20 s of a ~70 s run.
-      - uses: astral-sh/setup-uv@v10
+      - uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-dependency-glob: requirements.txt