diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 025273a..0f711dc 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -12,6 +12,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: astral-sh/setup-uv@v5
+        with:
+          # Pin uv's managed CPython: the runner's system python lacks
+          # libpython3.x.so, which PyInstaller needs for --onefile builds.
+          python-version: "3.12"
 
       - name: Install dependencies
         run: uv sync --frozen
@@ -35,6 +39,10 @@ jobs:
       - uses: actions/checkout@v4
 
       - uses: astral-sh/setup-uv@v5
+        with:
+          # Pin uv's managed CPython: the runner's system python lacks
+          # libpython3.x.so, which PyInstaller needs for --onefile builds.
+          python-version: "3.12"
 
       - name: Install dependencies
         run: uv sync --frozen --group build