diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 874795b..1c1cbdf 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -6,9 +6,12 @@ repos:
   - repo: local
     hooks:
       - id: uv-lock
-        name: uv lock
+        # CI must only validate the committed resolution. `--upgrade` rewrites uv.lock
+        # when a transitive release appears on PyPI, causing an otherwise valid push
+        # to fail before this workflow is allowed to commit the change.
+        name: uv lock (check)
         entry: uv
-        args: ["lock", "--upgrade"]
+        args: ["lock", "--locked"]
         language: system
         pass_filenames: false