diff --git a/.github/workflows/add-to-project.yaml b/.github/workflows/add-to-project.yaml
index 223de24..b4f2623 100644
--- a/.github/workflows/add-to-project.yaml
+++ b/.github/workflows/add-to-project.yaml
@@ -17,5 +17,5 @@ on:
 jobs:
   call-workflow-add-to-project:
     name: Call workflow to add issue to project
-    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@936b87d881ecb3b746df8b7e88ae583de5423a07 # main
+    uses: bufbuild/base-workflows/.github/workflows/add-to-project.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
     secrets: inherit
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 989936a..ff8e183 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -24,12 +24,12 @@ jobs:
       UV_RESOLUTION: "${{ matrix.resolution }}"
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync
@@ -40,12 +40,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version: stable
           # We use this to install certain tools defined in poe tasks
           cache-dependency-path: poe_tasks.toml
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
         with:
           python-version: ${{ matrix.python-version }}
       - run: uv sync --locked
diff --git a/.github/workflows/emergency-review-bypass.yaml b/.github/workflows/emergency-review-bypass.yaml
index 2f035d8..4c6034e 100644
--- a/.github/workflows/emergency-review-bypass.yaml
+++ b/.github/workflows/emergency-review-bypass.yaml
@@ -9,5 +9,5 @@ jobs:
   approve:
     name: Approve
     if: github.event.label.name == 'Emergency Bypass Review'
-    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@936b87d881ecb3b746df8b7e88ae583de5423a07 # main
+    uses: bufbuild/base-workflows/.github/workflows/emergency-review-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
     secrets: inherit
diff --git a/.github/workflows/notify-approval-bypass.yaml b/.github/workflows/notify-approval-bypass.yaml
index a1d3614..4f76f1a 100644
--- a/.github/workflows/notify-approval-bypass.yaml
+++ b/.github/workflows/notify-approval-bypass.yaml
@@ -10,5 +10,5 @@ permissions:
 jobs:
   notify:
     name: Notify
-    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@936b87d881ecb3b746df8b7e88ae583de5423a07 # main
+    uses: bufbuild/base-workflows/.github/workflows/notify-approval-bypass.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
     secrets: inherit
diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml
index cdad4f4..f11091c 100644
--- a/.github/workflows/pr-title.yaml
+++ b/.github/workflows/pr-title.yaml
@@ -15,4 +15,4 @@ on:
       - synchronize
 jobs:
   lint:
-    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@936b87d881ecb3b746df8b7e88ae583de5423a07 # main
+    uses: bufbuild/base-workflows/.github/workflows/pr-title.yaml@1f59ddae24793e271c2a4fea27d9c8985b5e1f8e # main
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 854d08b..0132663 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,7 +19,7 @@ jobs:
         run: |
           VERSION=${{github.head_ref}}
           echo "VERSION=${VERSION##*/}" >> $GITHUB_ENV
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 # v8.3.0
       - name: Build release
         run: |
           uv build