diff --git a/.github/workflows/lane-shas.yml b/.github/workflows/lane-shas.yml
index 1b1ef2d8..3486e817 100644
--- a/.github/workflows/lane-shas.yml
+++ b/.github/workflows/lane-shas.yml
@@ -33,32 +33,34 @@ jobs:
         with:
           fetch-depth: 1
 
-      - name: set up python
-        uses: actions/setup-python@v5
+      # setup-uv (not actions/setup-python) provisions Python on the aarch64
+      # self-hosted runner; actions/setup-python has no arm64 build for the
+      # pinned 3.12.13. Matches smoke.yml / full-pytest.yml.
+      - name: set up uv
+        uses: astral-sh/setup-uv@v5
         with:
           python-version: '3.12.13'
-          cache: 'pip'
+          enable-cache: true
 
       - name: install dependencies
         run: |
-          python -m pip install --upgrade pip
-          pip install -e . pyyaml pytest
+          uv pip install -e . pyyaml pytest
 
       - name: verify lane SHAs
         env:
           PYTHONPATH: ${{ github.workspace }}
         run: |
-          python scripts/verify_lane_shas.py
+          uv run python scripts/verify_lane_shas.py
 
       - name: verify CLAIMS.md is current
         env:
           PYTHONPATH: ${{ github.workspace }}
         run: |
-          python scripts/generate_claims.py --check
+          uv run python scripts/generate_claims.py --check
 
       - name: emit machine-readable report (on failure)
         if: failure()
         env:
           PYTHONPATH: ${{ github.workspace }}
         run: |
-          python scripts/verify_lane_shas.py --json || true
+          uv run python scripts/verify_lane_shas.py --json || true
diff --git a/docs/model_dependency_size_tally.md b/docs/model_dependency_size_tally.md
index c85ab322..2fb130c7 100644
--- a/docs/model_dependency_size_tally.md
+++ b/docs/model_dependency_size_tally.md
@@ -100,7 +100,7 @@ learned-params tally above. Measure precisely with
 | `pytest-xdist` | >=3.6 | parallel tests | <1 MB |
 | `hypothesis` | >=6.152.7 | property tests | ~5 MB |
 | `psutil` | >=7.0 | process/resource probing | ~2 MB |
-| `pyrage` | ==1.2.3 | age encryption (Rust binding) | ~3 MB |
+| `pyrage` | ==1.2.4 | age encryption (Rust binding) | ~3 MB |
 | `pyyaml` | >=6.0 | config/manifest parsing | ~1 MB |
 
 > **Footprint note:** `datasets` dominates the Python install. If the GSM8K
diff --git a/pyproject.toml b/pyproject.toml
index c8c237f8..02a81718 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -11,7 +11,7 @@ dependencies = [
     "pytest-asyncio>=1.3.0",
     "pytest-xdist>=3.6",
     "psutil>=7.0",
-    "pyrage==1.2.3",
+    "pyrage==1.2.4",
     "pyyaml>=6.0",
     "ruff>=0.15.12",
     "datasets>=4.8.5",