diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d0d044b..e64f726 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -41,7 +41,7 @@ jobs:
       # a runner image refresh is the whole distance between that working and
       # not. `uv run --no-project` chooses instead of inheriting.
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.0
+        uses: astral-sh/setup-uv@v10.3.2
 
       - name: Validate the catalog
         run: uv run --no-project scripts/validate.py
@@ -85,7 +85,7 @@ jobs:
       # toolchain.toml and this runner did not have it, so `deps.sh check`
       # failed here first and named the tool. That is the manifest working.
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.0
+        uses: astral-sh/setup-uv@v10.3.2
 
       # The same preflight a contributor runs, on the runner that is supposed to
       # satisfy it. A manifest nothing reads goes stale the first time a tool is
@@ -212,7 +212,7 @@ jobs:
       # `language: python` hooks, and that copy is not on PATH -- which is what
       # this job failed on when the hooks moved off bare `python3`.
       - name: Install uv
-        uses: astral-sh/setup-uv@v10.3.0
+        uses: astral-sh/setup-uv@v10.3.2
 
       # The syntax rung's hooks are `language: system` on every runner, as the
       # entry docs/COVERAGE.md gives a consumer, so each leg needs the binary.