diff --git a/.github/workflows/dev.yaml b/.github/workflows/dev.yaml
index 3ee2aed..8e27c15 100644
--- a/.github/workflows/dev.yaml
+++ b/.github/workflows/dev.yaml
@@ -63,6 +63,6 @@ jobs:
           pre-commit run --all-files --color=always --show-diff-on-failure --verbose
 
       - name: Analyze workflows with zizmor
-        uses: zizmorcore/zizmor-action@6599ee8b7a49aef6a770f63d261d214911a7ce02 # v0.6.0
+        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
         with:
           advanced-security: false
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 8444e8e..ea42acb 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -39,7 +39,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # v8.3.2
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9  # v9.0.0
 
       - name: Test
         run: |