diff --git a/.github/workflows/bos-build-tests.yml b/.github/workflows/bos-build-tests.yml
index 75172366c..146289580 100644
--- a/.github/workflows/bos-build-tests.yml
+++ b/.github/workflows/bos-build-tests.yml
@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Run bos_build tests
         run: uv run python -m unittest discover -s bos_build -t . -p "*_test.py" -v
diff --git a/.github/workflows/build-browseros.yml b/.github/workflows/build-browseros.yml
index 45c302dc0..0f2843e76 100644
--- a/.github/workflows/build-browseros.yml
+++ b/.github/workflows/build-browseros.yml
@@ -102,7 +102,7 @@ jobs:
 
       # v8.x.y releases exist but astral-sh publishes no floating `v8`
       # major tag - `@v8` is unresolvable and kills the job in Set up job.
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Bun
         if: inputs['bundle-local-extensions']
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 47cad0ced..1a1a114d5 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -35,7 +35,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1.0.159
+        uses: anthropics/claude-code-action@v1.0.171
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           additional_permissions: |
diff --git a/.github/workflows/release-browserclaw.yml b/.github/workflows/release-browserclaw.yml
index d14577432..9a96b26a2 100644
--- a/.github/workflows/release-browserclaw.yml
+++ b/.github/workflows/release-browserclaw.yml
@@ -438,7 +438,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.stage_gate.outputs.should_stage == 'true' }}
 
       - name: Render staged update feeds
@@ -825,7 +825,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.release_gate.outputs.should_create == 'true' }}
 
       - name: Create or refresh draft GitHub release
diff --git a/.github/workflows/release-browseros.yml b/.github/workflows/release-browseros.yml
index 52bbe886e..a075df887 100644
--- a/.github/workflows/release-browseros.yml
+++ b/.github/workflows/release-browseros.yml
@@ -425,7 +425,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.stage_gate.outputs.should_stage == 'true' }}
 
       - name: Render staged update feeds
@@ -803,7 +803,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.release_gate.outputs.should_create == 'true' }}
 
       - name: Create or refresh draft GitHub release
diff --git a/.github/workflows/release-claw-server-rust.yml b/.github/workflows/release-claw-server-rust.yml
index de2121108..fe4824f41 100644
--- a/.github/workflows/release-claw-server-rust.yml
+++ b/.github/workflows/release-claw-server-rust.yml
@@ -200,7 +200,7 @@ jobs:
           ref: ${{ needs.release.outputs.release_sha }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Python
         shell: bash
diff --git a/.github/workflows/release-claw-server.yml b/.github/workflows/release-claw-server.yml
index 57e6df0e8..b9ff65c28 100644
--- a/.github/workflows/release-claw-server.yml
+++ b/.github/workflows/release-claw-server.yml
@@ -303,7 +303,7 @@ jobs:
 
       - name: Setup uv
         if: ${{ inputs.publish_ota == true }}
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Publish alpha BrowserClaw server OTA artifacts
         if: ${{ inputs.publish_ota == true }}
diff --git a/.github/workflows/release-extension-feeds.yml b/.github/workflows/release-extension-feeds.yml
index 0b1907a68..fc1d6d6f6 100644
--- a/.github/workflows/release-extension-feeds.yml
+++ b/.github/workflows/release-extension-feeds.yml
@@ -74,7 +74,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Generate extension update feeds
         working-directory: packages/browseros
diff --git a/.github/workflows/release-extensions.yml b/.github/workflows/release-extensions.yml
index d7e6e651b..f4ad63667 100644
--- a/.github/workflows/release-extensions.yml
+++ b/.github/workflows/release-extensions.yml
@@ -91,7 +91,7 @@ jobs:
           ref: ${{ inputs.branch || github.ref }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-server.yml b/.github/workflows/release-server.yml
index 5509c2df7..ed8583a76 100644
--- a/.github/workflows/release-server.yml
+++ b/.github/workflows/release-server.yml
@@ -304,7 +304,7 @@ jobs:
 
       - name: Setup uv
         if: ${{ inputs.publish_ota == true }}
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Publish alpha server OTA artifacts
         if: ${{ inputs.publish_ota == true }}