diff --git a/setup-uv/action.yml b/setup-uv/action.yml
index a0d3bc5..642e1e2 100644
--- a/setup-uv/action.yml
+++ b/setup-uv/action.yml
@@ -56,14 +56,14 @@ runs:
   steps:
     - name: Configure AWS credentials (read)
       if: inputs.codeartifact == 'read'
-      uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+      uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
       with:
         role-to-assume: ${{ inputs.codeartifact-role-read }}
         aws-region: ${{ inputs.aws-region }}
 
     - name: Configure AWS credentials (publish)
       if: inputs.codeartifact == 'publish'
-      uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4
+      uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
       with:
         role-to-assume: ${{ inputs.codeartifact-role-publish }}
         aws-region: ${{ inputs.aws-region }}
@@ -95,7 +95,7 @@ runs:
         echo "UV_PUBLISH_PASSWORD=${{ steps.codeartifact.outputs.token }}" >> $GITHUB_ENV
 
     - name: Setup uv
-      uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+      uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
       with:
         version: ${{ inputs.uv-version }}
         python-version: ${{ inputs.python-version }}