diff --git a/.claude/skills/review-dep-pr/SKILL.md b/.claude/skills/review-dep-pr/SKILL.md
index 6917ecfc47..c9460a07c3 100644
--- a/.claude/skills/review-dep-pr/SKILL.md
+++ b/.claude/skills/review-dep-pr/SKILL.md
@@ -299,7 +299,7 @@ For each PR based on user's choice:
    - Open a replacement PR targeting the original base branch, linking to the original PR in the description
    - Close the original Dependabot PR with a comment pointing to the replacement
    - **Use the replacement PR number for all remaining steps** (CI wait, merge)
-5. Wait for CI to pass using `gh pr checks <active-number> --watch --timeout 600` (10-minute timeout — if it expires, warn the user that CI may be stuck and ask how to proceed rather than hanging indefinitely). Use the replacement PR number if step 4 created one.
+5. Wait for CI to pass using `gh pr checks <active-number> --watch` (use the Bash tool's `timeout` parameter set to 600000ms to cap the wait — if it expires, warn the user that CI may be stuck and ask how to proceed). Use the replacement PR number if step 4 created one.
 6. Merge the active PR
 
 ### Fix CI and merge
@@ -308,7 +308,7 @@ For each PR based on user's choice:
 2. Investigate the CI failure
 3. Fix the issue
 4. Commit and push (same Dependabot fallback applies — if push fails, open a replacement PR and use that PR number for remaining steps)
-5. Wait for CI to pass using `gh pr checks <active-number> --watch --timeout 600` (10-minute timeout — if it expires, warn the user that CI may be stuck and ask how to proceed rather than hanging indefinitely)
+5. Wait for CI to pass using `gh pr checks <active-number> --watch` (use the Bash tool's `timeout` parameter set to 600000ms to cap the wait — if it expires, warn the user that CI may be stuck and ask how to proceed)
 6. Merge the active PR when green
 
 ### Close / Skip
diff --git a/.github/actions/setup-python-uv/action.yml b/.github/actions/setup-python-uv/action.yml
index 9fb47e980f..22589d2d1c 100644
--- a/.github/actions/setup-python-uv/action.yml
+++ b/.github/actions/setup-python-uv/action.yml
@@ -11,7 +11,7 @@ runs:
   using: composite
   steps:
     - name: Install uv
-      uses: astral-sh/setup-uv@c7f87aa956e4c323abf06d5dec078e358f6b4d04 # v6.0.0
+      uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0
       with:
         enable-cache: true
 
diff --git a/.github/workflows/pages-preview.yml b/.github/workflows/pages-preview.yml
index 7e7e0af205..dad681f8eb 100644
--- a/.github/workflows/pages-preview.yml
+++ b/.github/workflows/pages-preview.yml
@@ -41,7 +41,7 @@ jobs:
           allow-prereleases: true
 
       - name: Install uv
-        uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # v6.0.1
+        uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0
 
       - name: Install docs dependencies
         run: uv sync --group docs --no-dev
diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
index 468b6e9365..6c775514c4 100644
--- a/.github/workflows/pages.yml
+++ b/.github/workflows/pages.yml
@@ -39,7 +39,7 @@ jobs:
           allow-prereleases: true
 
       - name: Install uv
-        uses: astral-sh/setup-uv@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca # v6.0.1
+        uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0
 
       - name: Install docs dependencies
         run: uv sync --group docs --no-dev