diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 0f711dc..8feb71f 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -35,14 +35,19 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    env:
+      # Force uv-managed CPython: the runner's system python satisfies the
+      # "3.12" request but is built without libpython3.x.so, which
+      # PyInstaller --onefile requires.
+      UV_PYTHON: "3.12"
+      UV_PYTHON_PREFERENCE: only-managed
     steps:
       - uses: actions/checkout@v4
 
       - uses: astral-sh/setup-uv@v5
-        with:
-          # Pin uv's managed CPython: the runner's system python lacks
-          # libpython3.x.so, which PyInstaller needs for --onefile builds.
-          python-version: "3.12"
+
+      - name: Install managed Python
+        run: uv python install 3.12
 
       - name: Install dependencies
         run: uv sync --frozen --group build