diff --git a/.github/workflows/pact.yml b/.github/workflows/pact.yml
index 031079d8..e64410dc 100644
--- a/.github/workflows/pact.yml
+++ b/.github/workflows/pact.yml
@@ -37,7 +37,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
 
       - name: Generate consumer pacts
         run: uv run pytest -v -m contract tests/contract/
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
 
       # Stand up the MCP server. NOTE: single-user only exposes the *public*
       # management endpoints (/api/v1/status, /api/v1/vector-sync/status) — see