diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index cdbe065..1ac02a1 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -16,13 +16,13 @@ jobs:
           persist-credentials: false
 
       - name: Setup rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8
         with:
           components: rustfmt, clippy
           toolchain: stable
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       # pnpm comes from corepack (bundled with the runner's Node.js), pinned
       # to the version that wrote admin/frontend/pnpm-lock.yaml. The frozen
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8a9583b..5a2d2e9 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -30,18 +30,18 @@ jobs:
           persist-credentials: false
 
       - name: Setup rust
-        uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de
+        uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8
         with:
           components: rustfmt, clippy
           toolchain: stable
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           python-version: "3.13"
 
       - name: actions-setup-redis
-        uses: shogo82148/actions-setup-redis@v1.58.0
+        uses: shogo82148/actions-setup-redis@v1.58.1
         with:
           auto-start: false
           distribution: "valkey"