diff --git a/template/.github/workflows/checks.yml b/template/.github/workflows/checks.yml
index 57196ad..b7ecda2 100644
--- a/template/.github/workflows/checks.yml
+++ b/template/.github/workflows/checks.yml
@@ -50,7 +50,7 @@ jobs:
 
       - name: Install uv
         # pyproject.toml's required-version
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
         with:
           python-version: ${{ matrix.python-version }}
 
diff --git a/template/.github/workflows/image.yml b/template/.github/workflows/image.yml
index 69c888a..2ec105c 100644
--- a/template/.github/workflows/image.yml
+++ b/template/.github/workflows/image.yml
@@ -34,7 +34,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       - name: Read the tag
         id: read
diff --git a/template/.github/workflows/publish.yml b/template/.github/workflows/publish.yml
index d2b609b..6394a99 100644
--- a/template/.github/workflows/publish.yml
+++ b/template/.github/workflows/publish.yml
@@ -37,7 +37,7 @@ jobs:
           fetch-depth: 0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       - name: Build the tag's package, and its notes
         id: build
diff --git a/template/.github/workflows/security.yml b/template/.github/workflows/security.yml
index b581b44..3337803 100644
--- a/template/.github/workflows/security.yml
+++ b/template/.github/workflows/security.yml
@@ -32,7 +32,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884 # v10.3.0
 
       - name: Export the lock
         # every group, the workspace's own packages left out: they are this repository