diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml
index b898d44..9253c47 100644
--- a/.github/workflows/publish-pypi.yml
+++ b/.github/workflows/publish-pypi.yml
@@ -62,7 +62,7 @@ jobs:
           echo "Tag ${TAG} (${TAG_SHA}) is an ancestor of main — proceeding."
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
 
       - name: Build wheel + sdist
         working-directory: ${{ inputs.package-dir }}
@@ -107,7 +107,7 @@ jobs:
           packages-dir: dist/
 
       - name: Set up uv (for install verification venv)
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
 
       - name: Verify install from TestPyPI
         env: