diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index cc24c248..b9b4c57d 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -34,7 +34,7 @@ jobs:
           submodules: true # html5lib-tests data for the conformance test
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run ${{ matrix.py }}
@@ -58,7 +58,7 @@ jobs:
           submodules: true # html5lib-tests data for the conformance test
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run ${{ matrix.py }}
@@ -78,7 +78,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run ${{ matrix.tox_env }}
@@ -110,7 +110,7 @@ jobs:
         run: npm ci
         working-directory: tools/bench/node
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run the conformance suites
@@ -140,7 +140,7 @@ jobs:
           fetch-depth: 0 # meson project() derives the version from git history
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Build with -Werror
@@ -179,7 +179,7 @@ jobs:
         with:
           arch: arm64
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Build with -Werror
@@ -205,7 +205,7 @@ jobs:
           fetch-depth: 0 # meson project() derives the version from git history
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run clang-tidy
@@ -225,7 +225,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run tsan
diff --git a/.github/workflows/codspeed.yaml b/.github/workflows/codspeed.yaml
index 768d8b38..63b4b2d3 100644
--- a/.github/workflows/codspeed.yaml
+++ b/.github/workflows/codspeed.yaml
@@ -24,7 +24,7 @@ jobs:
           submodules: true # the benchmarks read the vendored html5lib-python and War-and-Peace corpora
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       # build the extension and install the benchmark deps outside the runner, so only the pytest process below is
diff --git a/.github/workflows/fuzz.yaml b/.github/workflows/fuzz.yaml
index 0c39efe2..e9b7f6a7 100644
--- a/.github/workflows/fuzz.yaml
+++ b/.github/workflows/fuzz.yaml
@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0 # meson project() derives the version from git history
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run fuzz-smoke
@@ -43,7 +43,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: ✅ Run fuzz (deep)
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 7c64b5f3..0cc79dfd 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -25,7 +25,7 @@ jobs:
           token: ${{ secrets.RELEASE_PAT }}
           persist-credentials: true # the PAT is reused to push the release commit and tag
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: true
           cache-dependency-glob: pyproject.toml
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8a0ae0b3..fe8b058d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,7 +20,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: 📦 Build sdist
@@ -50,7 +50,7 @@ jobs:
           submodules: true # the Linux wheels train the profile-guided build on the vendored html5lib and War-and-Peace corpora
           persist-credentials: false
       - name: 🔄 Install uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           enable-cache: false
       - name: 🎡 Build wheels