diff --git a/.circleci/config.yml b/.circleci/config.yml
index e098e65bd23..e7dfc97a071 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -31,7 +31,10 @@ commands:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             uv sync --frozen --all-groups --all-extras --python "$(which python)"
       - setup_litellm_enterprise_pip
@@ -85,7 +88,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             uv sync --frozen --group dev --python "$(which python)" --no-install-package fastuuid
       - run:
@@ -111,13 +117,16 @@ jobs:
       - run:
           name: Install Semgrep
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
       - run:
           name: Run Semgrep (custom rules only)
           command: |
             export PATH="$HOME/.local/bin:$PATH"
-            uv tool run --from semgrep semgrep scan --config .semgrep/rules . --error
+            uv tool run --from 'semgrep==1.157.0' semgrep scan --config .semgrep/rules . --error
 
   local_testing_part1:
     docker:
@@ -141,7 +150,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -227,7 +239,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -314,7 +329,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -360,7 +378,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -410,7 +431,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -465,7 +489,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -505,7 +532,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -543,7 +573,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -592,7 +625,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -638,7 +674,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -682,7 +721,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -726,7 +768,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -771,7 +816,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -820,7 +868,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -859,7 +910,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -903,7 +957,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -987,7 +1044,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1021,7 +1081,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1065,7 +1128,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1110,7 +1176,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1155,7 +1224,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1188,7 +1260,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1233,7 +1308,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1277,7 +1355,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1308,7 +1389,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1422,7 +1506,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1482,7 +1569,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1599,7 +1689,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1719,7 +1812,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -1842,7 +1938,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2005,7 +2104,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2120,7 +2222,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2257,7 +2362,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2366,7 +2474,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2473,7 +2584,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2637,7 +2751,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2769,7 +2886,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
@@ -2834,7 +2954,10 @@ jobs:
       - run:
           name: Combine Coverage
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             uv run --with 'coverage[toml]==7.10.6' coverage combine realtime_translation_coverage ocr_coverage search_coverage mcp_coverage litellm_mcps_tests_coverage logging_coverage audio_coverage local_testing_part1_coverage local_testing_part2_coverage pass_through_unit_tests_coverage batches_coverage guardrails_coverage
             uv run --with 'coverage[toml]==7.10.6' coverage xml
@@ -2855,7 +2978,10 @@ jobs:
       - run:
           name: Check if litellm-proxy-extras dir or pyproject.toml was modified
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             echo 'export PATH="$HOME/.local/bin:$PATH"' >> "$BASH_ENV"
             export PATH="$HOME/.local/bin:$PATH"
             # Get current version from pyproject.toml
@@ -3075,7 +3201,10 @@ jobs:
       - run:
           name: Install Dependencies
           command: |
-            curl -LsSf https://astral.sh/uv/0.10.9/install.sh | env UV_NO_MODIFY_PATH=1 sh
+            curl -LsSf -o /tmp/uv-install.sh https://astral.sh/uv/0.10.9/install.sh
+            echo "7fc46e39cb97290b57169c0c813a17970585ac519139f19006453c99b5f2f45f  /tmp/uv-install.sh" | sha256sum -c -
+            env UV_NO_MODIFY_PATH=1 sh /tmp/uv-install.sh
+            rm -f /tmp/uv-install.sh
             export PATH="$HOME/.local/bin:$PATH"
             if [ -f "$HOME/miniconda/etc/profile.d/conda.sh" ]; then
               export PATH="$HOME/miniconda/bin:$PATH"
diff --git a/.github/workflows/_test-unit-base.yml b/.github/workflows/_test-unit-base.yml
index ed841cd1566..ec808efc2b0 100644
--- a/.github/workflows/_test-unit-base.yml
+++ b/.github/workflows/_test-unit-base.yml
@@ -48,7 +48,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/.github/workflows/_test-unit-services-base.yml b/.github/workflows/_test-unit-services-base.yml
index 8d699efbf42..34285e918cc 100644
--- a/.github/workflows/_test-unit-services-base.yml
+++ b/.github/workflows/_test-unit-services-base.yml
@@ -96,7 +96,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/.github/workflows/auto_update_price_and_context_window.yml b/.github/workflows/auto_update_price_and_context_window.yml
index fc7c4886a78..1c6c318c717 100644
--- a/.github/workflows/auto_update_price_and_context_window.yml
+++ b/.github/workflows/auto_update_price_and_context_window.yml
@@ -18,7 +18,9 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
       - name: Update JSON Data
         run: |
           uv run --frozen --with 'aiohttp==3.13.3' python ".github/workflows/auto_update_price_and_context_window_file.py"
diff --git a/.github/workflows/codspeed.yml b/.github/workflows/codspeed.yml
index 83f7387ac67..eab8d76707f 100644
--- a/.github/workflows/codspeed.yml
+++ b/.github/workflows/codspeed.yml
@@ -35,7 +35,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Run benchmarks
         uses: CodSpeedHQ/action@1c8ae4843586d3ba879736b7f6b7b0c990757fab # v4.12.1
diff --git a/.github/workflows/llm-translation-testing.yml b/.github/workflows/llm-translation-testing.yml
index 10385ac8394..57d2fff2b52 100644
--- a/.github/workflows/llm-translation-testing.yml
+++ b/.github/workflows/llm-translation-testing.yml
@@ -32,7 +32,9 @@ jobs:
           python-version: "3.11"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/.github/workflows/publish_to_pypi.yml b/.github/workflows/publish_to_pypi.yml
index f37a4186875..f7f3a3d988c 100644
--- a/.github/workflows/publish_to_pypi.yml
+++ b/.github/workflows/publish_to_pypi.yml
@@ -25,7 +25,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Check litellm version on PyPI
         id: check-litellm
@@ -113,7 +115,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Copy model prices backup
         run: cp model_prices_and_context_window.json litellm/model_prices_and_context_window_backup.json
diff --git a/.github/workflows/test-linting.yml b/.github/workflows/test-linting.yml
index fdf8d6e9c4e..eefa42e7fa2 100644
--- a/.github/workflows/test-linting.yml
+++ b/.github/workflows/test-linting.yml
@@ -25,7 +25,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Clean Python cache
         run: |
@@ -99,7 +101,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Run secret scan test
         run: |
diff --git a/.github/workflows/test-litellm-matrix.yml b/.github/workflows/test-litellm-matrix.yml
index 63ee8eb3288..6c4b5ab867f 100644
--- a/.github/workflows/test-litellm-matrix.yml
+++ b/.github/workflows/test-litellm-matrix.yml
@@ -130,7 +130,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.0.0
diff --git a/.github/workflows/test-litellm.yml b/.github/workflows/test-litellm.yml
index 44e14e5e6e5..938647f5d0c 100644
--- a/.github/workflows/test-litellm.yml
+++ b/.github/workflows/test-litellm.yml
@@ -32,7 +32,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/test-mcp.yml b/.github/workflows/test-mcp.yml
index 8a18e48a7c9..11c5441bf9c 100644
--- a/.github/workflows/test-mcp.yml
+++ b/.github/workflows/test-mcp.yml
@@ -28,7 +28,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Install dependencies
         run: |
diff --git a/.github/workflows/test-proxy-e2e-azure-batches.yml b/.github/workflows/test-proxy-e2e-azure-batches.yml
index 2fdb720cddb..c4a43bf4cb9 100644
--- a/.github/workflows/test-proxy-e2e-azure-batches.yml
+++ b/.github/workflows/test-proxy-e2e-azure-batches.yml
@@ -43,7 +43,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.0.0
diff --git a/.github/workflows/test-unit-documentation.yml b/.github/workflows/test-unit-documentation.yml
index ea70932d5a2..8440c53f9f5 100644
--- a/.github/workflows/test-unit-documentation.yml
+++ b/.github/workflows/test-unit-documentation.yml
@@ -27,7 +27,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/.github/workflows/test-unit-proxy-legacy.yml b/.github/workflows/test-unit-proxy-legacy.yml
index 94a2e523903..d4f5c38a61c 100644
--- a/.github/workflows/test-unit-proxy-legacy.yml
+++ b/.github/workflows/test-unit-proxy-legacy.yml
@@ -51,7 +51,9 @@ jobs:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+        with:
+          version: "0.10.9"
 
       - name: Cache uv dependencies
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
diff --git a/Dockerfile b/Dockerfile
index 8ff0a2446eb..c7f0ad944f6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,7 +3,7 @@ ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92
 
 # Runtime image
 ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92f02178f37c94bb3d6001403716da59d6092dfe8d9b502
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 
 FROM $UV_IMAGE AS uvbin
 
diff --git a/docker/Dockerfile.alpine b/docker/Dockerfile.alpine
index 53fece6a498..962021582e3 100644
--- a/docker/Dockerfile.alpine
+++ b/docker/Dockerfile.alpine
@@ -3,7 +3,7 @@ ARG LITELLM_BUILD_IMAGE=python:3.11-alpine@sha256:f07e2ace46f560f09a6eeec7b4913b
 
 # Runtime image
 ARG LITELLM_RUNTIME_IMAGE=python:3.11-alpine@sha256:f07e2ace46f560f09a6eeec7b4913b80ee99546e749ef82342a419a326620856
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 
 FROM $UV_IMAGE AS uvbin
 
diff --git a/docker/Dockerfile.database b/docker/Dockerfile.database
index e098571743a..416d287d3aa 100644
--- a/docker/Dockerfile.database
+++ b/docker/Dockerfile.database
@@ -3,7 +3,7 @@ ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92
 
 # Runtime image
 ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92f02178f37c94bb3d6001403716da59d6092dfe8d9b502
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 
 FROM $UV_IMAGE AS uvbin
 
diff --git a/docker/Dockerfile.dev b/docker/Dockerfile.dev
index 3d52628a831..daa92dbaf54 100644
--- a/docker/Dockerfile.dev
+++ b/docker/Dockerfile.dev
@@ -3,7 +3,7 @@ ARG LITELLM_BUILD_IMAGE=python:3.13-slim@sha256:739e7213785e88c0f702dcdc12c0973a
 
 # Runtime image
 ARG LITELLM_RUNTIME_IMAGE=python:3.13-slim@sha256:739e7213785e88c0f702dcdc12c0973afcbd606dbf021a589cab77d6b00b579d
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 
 FROM $UV_IMAGE AS uvbin
 
diff --git a/docker/Dockerfile.health_check b/docker/Dockerfile.health_check
index caf043cec97..f28c7cf5587 100644
--- a/docker/Dockerfile.health_check
+++ b/docker/Dockerfile.health_check
@@ -1,4 +1,4 @@
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 FROM $UV_IMAGE AS uvbin
 
 FROM python:3.13-slim@sha256:739e7213785e88c0f702dcdc12c0973afcbd606dbf021a589cab77d6b00b579d
@@ -7,13 +7,15 @@ WORKDIR /app
 
 # Copy the uv binary and the health check script.
 COPY --from=uvbin /uv /usr/local/bin/uv
+COPY pyproject.toml uv.lock /app/
 COPY scripts/health_check/health_check_client.py /app/health_check_client.py
 
-# Resolve and install the script dependencies at build time so the runtime
-# image stays self-contained in air-gapped or egress-restricted environments.
-RUN uv export --script /app/health_check_client.py --no-hashes --output-file /tmp/health-check-requirements.txt \
+# Resolve and install the health-check dependencies from the project lockfile
+# so the runtime image stays self-contained and reproducible.
+RUN uv export --frozen --no-default-groups --only-group healthcheck --no-emit-project --no-hashes --output-file /tmp/health-check-requirements.txt \
   && uv pip install --system -r /tmp/health-check-requirements.txt \
   && rm /tmp/health-check-requirements.txt \
+  && rm /app/pyproject.toml /app/uv.lock \
   && chmod +x /app/health_check_client.py
 
 # Run as non-root user
diff --git a/docker/Dockerfile.non_root b/docker/Dockerfile.non_root
index 19a89d5b103..0720f65f8e1 100644
--- a/docker/Dockerfile.non_root
+++ b/docker/Dockerfile.non_root
@@ -2,7 +2,7 @@
 ARG LITELLM_BUILD_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92f02178f37c94bb3d6001403716da59d6092dfe8d9b502
 ARG LITELLM_RUNTIME_IMAGE=cgr.dev/chainguard/wolfi-base@sha256:a5a619c1793039dcf92f02178f37c94bb3d6001403716da59d6092dfe8d9b502
 ARG PROXY_EXTRAS_SOURCE=published
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 
 FROM $UV_IMAGE AS uvbin
 
diff --git a/docker/build_from_pip/Dockerfile.build_from_pip b/docker/build_from_pip/Dockerfile.build_from_pip
index 5837bc83d12..2ce8b9dc4f8 100644
--- a/docker/build_from_pip/Dockerfile.build_from_pip
+++ b/docker/build_from_pip/Dockerfile.build_from_pip
@@ -1,4 +1,4 @@
-ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9
+ARG UV_IMAGE=ghcr.io/astral-sh/uv:0.10.9@sha256:10902f58a1606787602f303954cea099626a4adb02acbac4c69920fe9d278f82
 FROM $UV_IMAGE AS uvbin
 
 FROM python:3.13-slim@sha256:739e7213785e88c0f702dcdc12c0973afcbd606dbf021a589cab77d6b00b579d
diff --git a/enterprise/pyproject.toml b/enterprise/pyproject.toml
index 2523df45c46..8e185e4f482 100644
--- a/enterprise/pyproject.toml
+++ b/enterprise/pyproject.toml
@@ -15,9 +15,12 @@ Repository = "https://github.com/BerriAI/litellm"
 Documentation = "https://docs.litellm.ai"
 
 [build-system]
-requires = ["uv_build>=0.10.7,<0.11"]
+requires = ["uv_build==0.10.7"]
 build-backend = "uv_build"
 
+[tool.uv]
+required-version = "==0.10.9"
+
 [tool.uv.build-backend]
 module-root = ""
 
diff --git a/litellm-proxy-extras/pyproject.toml b/litellm-proxy-extras/pyproject.toml
index 8a5ead979a0..d7bcc026dc1 100644
--- a/litellm-proxy-extras/pyproject.toml
+++ b/litellm-proxy-extras/pyproject.toml
@@ -15,9 +15,12 @@ Repository = "https://github.com/BerriAI/litellm"
 Documentation = "https://docs.litellm.ai"
 
 [build-system]
-requires = ["uv_build>=0.10.7,<0.11"]
+requires = ["uv_build==0.10.7"]
 build-backend = "uv_build"
 
+[tool.uv]
+required-version = "==0.10.9"
+
 [tool.uv.build-backend]
 module-root = ""
 
diff --git a/pyproject.toml b/pyproject.toml
index f76fb986f1e..65e10e71089 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -199,13 +199,18 @@ ci = [
     "langgraph==1.0.10; python_version >= '3.10'",
     "claude-agent-sdk==0.1.44; python_version >= '3.10'",
 ]
+healthcheck = [
+    "httpx==0.28.1",
+    "pyyaml==6.0.3",
+]
 
 [build-system]
-requires = ["uv_build>=0.10.7,<0.11"]
+requires = ["uv_build==0.10.7"]
 build-backend = "uv_build"
 
 [tool.uv]
 default-groups = ["dev"]
+required-version = "==0.10.9"
 exclude-newer = "30 days"
 
 [tool.uv.sources]
diff --git a/scripts/health_check/health_check_client.py b/scripts/health_check/health_check_client.py
index ecda12e1d95..ef496694dea 100644
--- a/scripts/health_check/health_check_client.py
+++ b/scripts/health_check/health_check_client.py
@@ -1,11 +1,4 @@
 #!/usr/bin/env python3
-# /// script
-# requires-python = ">=3.9"
-# dependencies = [
-#   "httpx==0.28.1",
-#   "pyyaml==6.0.2",
-# ]
-# ///
 
 """
 LiteLLM Health Check Client
diff --git a/uv.lock b/uv.lock
index c13058a20f2..c343bc9be7b 100644
--- a/uv.lock
+++ b/uv.lock
@@ -11,7 +11,7 @@ resolution-markers = [
 ]
 
 [options]
-exclude-newer = "2026-03-03T04:19:32.690703328Z"
+exclude-newer = "2026-03-03T09:21:56.966452805Z"
 exclude-newer-span = "P30D"
 
 [manifest]
@@ -4165,6 +4165,10 @@ dev = [
     { name = "types-requests", marker = "python_full_version >= '3.10'" },
     { name = "types-setuptools" },
 ]
+healthcheck = [
+    { name = "httpx" },
+    { name = "pyyaml" },
+]
 proxy-dev = [
     { name = "a2a-sdk", marker = "python_full_version >= '3.10'" },
     { name = "azure-identity" },
@@ -4321,6 +4325,10 @@ dev = [
     { name = "types-requests", marker = "python_full_version >= '3.10'", specifier = "==2.32.4.20260107" },
     { name = "types-setuptools", specifier = "==75.8.0.20250225" },
 ]
+healthcheck = [
+    { name = "httpx", specifier = "==0.28.1" },
+    { name = "pyyaml", specifier = "==6.0.3" },
+]
 proxy-dev = [
     { name = "a2a-sdk", marker = "python_full_version >= '3.10'", specifier = "==0.3.24" },
     { name = "azure-identity", marker = "python_full_version >= '3.9'", specifier = "==1.25.2" },