diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b00fe7a..8e2c3cf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,11 +16,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.3.2 # exact pin: upstream ships no floating v8 tag
         with:
           enable-cache: true
       - run: uv sync --frozen --extra dev
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.3.2 # exact pin: upstream ships no floating v8 tag
         with:
           enable-cache: true
       - run: uv sync --frozen --extra dev
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a367479..24f950f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - uses: astral-sh/setup-uv@v7
+      - uses: astral-sh/setup-uv@v8.3.2 # exact pin: upstream ships no floating v8 tag
         with:
           enable-cache: true