diff --git a/.github/workflows/bos-build-tests.yml b/.github/workflows/bos-build-tests.yml
index 75172366c..146289580 100644
--- a/.github/workflows/bos-build-tests.yml
+++ b/.github/workflows/bos-build-tests.yml
@@ -27,7 +27,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Run bos_build tests
         run: uv run python -m unittest discover -s bos_build -t . -p "*_test.py" -v
diff --git a/.github/workflows/build-browseros.yml b/.github/workflows/build-browseros.yml
index d5bf71e00..89ded70f9 100644
--- a/.github/workflows/build-browseros.yml
+++ b/.github/workflows/build-browseros.yml
@@ -102,7 +102,7 @@ jobs:
 
       # v8.x.y releases exist but astral-sh publishes no floating `v8`
       # major tag - `@v8` is unresolvable and kills the job in Set up job.
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Bun
         if: inputs['bundle-local-extensions']
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 47cad0ced..34ad13d7e 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -35,7 +35,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1.0.159
+        uses: anthropics/claude-code-action@v1.0.177
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           additional_permissions: |
diff --git a/.github/workflows/release-browserclaw.yml b/.github/workflows/release-browserclaw.yml
index 940cd8c12..58c98b957 100644
--- a/.github/workflows/release-browserclaw.yml
+++ b/.github/workflows/release-browserclaw.yml
@@ -440,7 +440,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.stage_gate.outputs.should_stage == 'true' }}
 
       - name: Render staged update feeds
@@ -827,7 +827,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.release_gate.outputs.should_create == 'true' }}
 
       - name: Create or refresh draft GitHub release
diff --git a/.github/workflows/release-browseros.yml b/.github/workflows/release-browseros.yml
index 6d5c6d005..2df836f7f 100644
--- a/.github/workflows/release-browseros.yml
+++ b/.github/workflows/release-browseros.yml
@@ -425,7 +425,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.stage_gate.outputs.should_stage == 'true' }}
 
       - name: Render staged update feeds
@@ -803,7 +803,7 @@ jobs:
         with:
           ref: ${{ github.ref }}
 
-      - uses: astral-sh/setup-uv@v8.2.0
+      - uses: astral-sh/setup-uv@v8.3.2
         if: ${{ steps.release_gate.outputs.should_create == 'true' }}
 
       - name: Create or refresh draft GitHub release
diff --git a/.github/workflows/release-claw-server-rust.yml b/.github/workflows/release-claw-server-rust.yml
index 5ea1339f0..54f7f01bb 100644
--- a/.github/workflows/release-claw-server-rust.yml
+++ b/.github/workflows/release-claw-server-rust.yml
@@ -213,7 +213,7 @@ jobs:
           ref: ${{ needs.release.outputs.release_sha }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Python
         shell: bash
@@ -551,7 +551,7 @@ jobs:
           fi
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Publish alpha BrowserClaw server OTA artifacts
         working-directory: packages/browseros
diff --git a/.github/workflows/release-extension-feeds.yml b/.github/workflows/release-extension-feeds.yml
index 48e992f44..a5dd4656e 100644
--- a/.github/workflows/release-extension-feeds.yml
+++ b/.github/workflows/release-extension-feeds.yml
@@ -75,7 +75,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Generate extension update feeds
         working-directory: packages/browseros
diff --git a/.github/workflows/release-extensions.yml b/.github/workflows/release-extensions.yml
index ac010785d..477be6968 100644
--- a/.github/workflows/release-extensions.yml
+++ b/.github/workflows/release-extensions.yml
@@ -108,7 +108,7 @@ jobs:
           ref: ${{ inputs.branch || github.ref }}
 
       - name: Setup uv
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-server.yml b/.github/workflows/release-server.yml
index 3a61424f1..413cc5a45 100644
--- a/.github/workflows/release-server.yml
+++ b/.github/workflows/release-server.yml
@@ -297,7 +297,7 @@ jobs:
 
       - name: Setup uv
         if: ${{ inputs.publish_ota == true }}
-        uses: astral-sh/setup-uv@v8.2.0
+        uses: astral-sh/setup-uv@v8.3.2
 
       - name: Publish alpha server OTA artifacts
         if: ${{ inputs.publish_ota == true }}