diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index c6af728..c927e85 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
 
       - name: Install deps
         run: uv sync --all-packages
diff --git a/.github/workflows/contributor-dry-run-monthly.yml b/.github/workflows/contributor-dry-run-monthly.yml
index 98ef3cc..624c83f 100644
--- a/.github/workflows/contributor-dry-run-monthly.yml
+++ b/.github/workflows/contributor-dry-run-monthly.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
       - uses: actions/setup-node@v4
         with:
           node-version: "22"
diff --git a/.github/workflows/corpus-validation.yml b/.github/workflows/corpus-validation.yml
index 794cc7e..dbfb057 100644
--- a/.github/workflows/corpus-validation.yml
+++ b/.github/workflows/corpus-validation.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
 
       - name: Install Python deps
         run: uv sync --all-packages
diff --git a/.github/workflows/mcp-contract.yml b/.github/workflows/mcp-contract.yml
index 1971c82..838e6e5 100644
--- a/.github/workflows/mcp-contract.yml
+++ b/.github/workflows/mcp-contract.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
       - name: Install deps (including MCP extras)
         run: uv sync --all-packages --extra mcp
       - name: Run MCP contract tests
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 180dd5a..4b77836 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
       - uses: pnpm/action-setup@v4
         with:
           version: 10
diff --git a/.github/workflows/security-sarif.yml b/.github/workflows/security-sarif.yml
index acd7b3f..7942c3b 100644
--- a/.github/workflows/security-sarif.yml
+++ b/.github/workflows/security-sarif.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: astral-sh/setup-uv@v4
+      - uses: astral-sh/setup-uv@v7
       - name: Install Python deps
         run: uv sync --all-packages
       - name: Generate Ruff SARIF (warning-first)