diff --git a/.github/workflows/benchmark-regression.yml b/.github/workflows/benchmark-regression.yml
index 7ef4d6d..ced1b27 100644
--- a/.github/workflows/benchmark-regression.yml
+++ b/.github/workflows/benchmark-regression.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "benchmark"
diff --git a/.github/workflows/build-verification.yml b/.github/workflows/build-verification.yml
index 6fc0829..a9a0428 100644
--- a/.github/workflows/build-verification.yml
+++ b/.github/workflows/build-verification.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "build-verification"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a3230a4..e3c84b9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "lint"
@@ -50,7 +50,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "test-fast"
@@ -79,7 +79,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "build"
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 2db0ff3..dfe9bfb 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "docs"
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2f5db67..2bad3be 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "publish"
diff --git a/.github/workflows/quality-checks.yml b/.github/workflows/quality-checks.yml
index 911bda7..cba3090 100644
--- a/.github/workflows/quality-checks.yml
+++ b/.github/workflows/quality-checks.yml
@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "quality"
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index b9b9bff..08a4e8f 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -25,7 +25,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "security"
diff --git a/.github/workflows/tests-extended.yml b/.github/workflows/tests-extended.yml
index 5a0fe60..451ea14 100644
--- a/.github/workflows/tests-extended.yml
+++ b/.github/workflows/tests-extended.yml
@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v10.2.0
         with:
           enable-cache: true
           cache-suffix: "extended"
diff --git a/Dockerfile b/Dockerfile
index 920bf3f..20d3c96 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,7 +33,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
   && rm -rf /var/lib/apt/lists/*
 
 # Install uv — pinned for reproducible builds. Update intentionally.
-RUN curl -LsSf https://astral.sh/uv/0.9.28/install.sh | env UV_INSTALL_DIR=/usr/local/bin sh
+RUN curl -LsSf https://astral.sh/uv/0.12.21/install.sh | env UV_INSTALL_DIR=/usr/local/bin sh
 
 # Use the system interpreter: a uv-managed Python would live under /root,
 # unreadable by the non-root runtime user.
diff --git a/deploy/modal_app.py b/deploy/modal_app.py
index 1ed318e..0a180dd 100644
--- a/deploy/modal_app.py
+++ b/deploy/modal_app.py
@@ -80,7 +80,7 @@
 app = modal.App(APP_NAME)
 
 # Pin uv to the version that generated uv.lock, for build stability.
-_UV_VERSION = "0.11.25"
+_UV_VERSION = "0.12.21"
 
 # `--frozen` installs the exact pinned versions from uv.lock WITHOUT re-resolving:
 # it gives full lock reproducibility while skipping the `--locked` consistency