diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 1df298d612a..6ab8dbf3648 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -39,7 +39,7 @@ jobs:
       env:
         GH_TOKEN: ${{ github.token }}
     - name: Install uv
-      run: curl -LsSf https://astral.sh/uv/install.sh | sh
+      uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # v7.3.0
     - name: Install Go language server (gopls)
       run: go install golang.org/x/tools/gopls@latest
     - name: Install TypeScript language server
diff --git a/.github/workflows/daily-copilot-token-report.lock.yml b/.github/workflows/daily-copilot-token-report.lock.yml
index a3bb599bbee..750f140b20a 100644
--- a/.github/workflows/daily-copilot-token-report.lock.yml
+++ b/.github/workflows/daily-copilot-token-report.lock.yml
@@ -358,7 +358,7 @@ jobs:
         name: Recompile workflows
         run: make recompile
       - name: Install uv
-        run: curl -LsSf https://astral.sh/uv/install.sh | sh
+        uses: astral-sh/setup-uv@eac588ad8def6316056a12d4907a9d4d84ff7a3b # eac588ad8def6316056a12d4907a9d4d84ff7a3b
       - name: Install Go language server (gopls)
         run: go install golang.org/x/tools/gopls@latest
       - name: Install TypeScript language server
diff --git a/.github/workflows/smoke-gemini.lock.yml b/.github/workflows/smoke-gemini.lock.yml
index d1d6955c678..3e2b7c571ba 100644
--- a/.github/workflows/smoke-gemini.lock.yml
+++ b/.github/workflows/smoke-gemini.lock.yml
@@ -404,7 +404,7 @@ jobs:
               version: "",
               agent_version: "",
               workflow_name: "Smoke Gemini",
-              experimental: true,
+              experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
               run_number: context.runNumber,