diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5bdc6e9..49ae7a5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
       id: setup_python
       with:
         python-version: ${{ matrix.python-version }}
-    - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0 # zizmor: ignore[cache-poisoning]
+    - uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1 # zizmor: ignore[cache-poisoning]
       # The cache is stored only on main branch and not used for publishing
       with:
         save-cache: ${{ github.ref == 'refs/heads/main' }}
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 5dfd95e..d1fb94e 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -42,7 +42,7 @@ jobs:
       uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       with:
         python-version: '3.14'
-    - uses: astral-sh/setup-uv@61cb8a9741eeb8a550a1b8544337180c0fc8476b # v7.2.0
+    - uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
       with:
         version: 0.9.28
         enable-cache: false