diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 6a5ef501c1f..a61b60bd24e 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -113,7 +113,7 @@ env:
   ENV_POLLUTING_TESTS_MACOS: >-
   ENV_POLLUTING_TESTS_WINDOWS: >-
   # Python version targeted by the CI.
-  PYTHON_VERSION: "3.14.2"
+  PYTHON_VERSION: "3.14.3"
   X86_64_PC_WINDOWS_MSVC_OPENSSL_LIB_DIR: C:\Program Files\OpenSSL\lib\VC\x64\MD
   X86_64_PC_WINDOWS_MSVC_OPENSSL_INCLUDE_DIR: C:\Program Files\OpenSSL\include
 
diff --git a/.github/workflows/cron-ci.yaml b/.github/workflows/cron-ci.yaml
index 0a546595a8c..f451984fb53 100644
--- a/.github/workflows/cron-ci.yaml
+++ b/.github/workflows/cron-ci.yaml
@@ -13,7 +13,7 @@ name: Periodic checks/tasks
 
 env:
   CARGO_ARGS: --no-default-features --features stdlib,importlib,encodings,ssl-rustls,jit
-  PYTHON_VERSION: "3.14.2"
+  PYTHON_VERSION: "3.14.3"
 
 jobs:
   # codecov collects code coverage data from the rust tests, python snippets and python test suite.
diff --git a/.github/workflows/lib-deps-check.yaml b/.github/workflows/lib-deps-check.yaml
index a4b7128d830..e4e7bd4ee45 100644
--- a/.github/workflows/lib-deps-check.yaml
+++ b/.github/workflows/lib-deps-check.yaml
@@ -4,12 +4,15 @@ on:
   pull_request_target:
     types: [opened, synchronize, reopened]
     paths:
-      - 'Lib/**'
+      - "Lib/**"
 
 concurrency:
   group: lib-deps-${{ github.event.pull_request.number }}
   cancel-in-progress: true
 
+env:
+  PYTHON_VERSION: "3.14.3"
+
 jobs:
   check_deps:
     permissions:
@@ -35,7 +38,7 @@ jobs:
 
       - name: Checkout CPython
         run: |
-          git clone --depth 1 --branch v3.14.2 https://github.com/python/cpython.git cpython
+          git clone --depth 1 --branch "v${{ env.PYTHON_VERSION }}" https://github.com/python/cpython.git cpython
 
       - name: Get changed Lib files
         id: changed-files
@@ -72,7 +75,7 @@ jobs:
         if: steps.changed-files.outputs.modules != ''
         uses: actions/setup-python@v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "${{ env.PYTHON_VERSION }}"
 
       - name: Run deps check
         if: steps.changed-files.outputs.modules != ''
diff --git a/.github/workflows/update-doc-db.yml b/.github/workflows/update-doc-db.yml
index 1fd3b930985..bbc8321d8d5 100644
--- a/.github/workflows/update-doc-db.yml
+++ b/.github/workflows/update-doc-db.yml
@@ -9,7 +9,7 @@ on:
       python-version:
         description: Target python version to generate doc db for
         type: string
-        default: "3.14.2"
+        default: "3.14.3"
       ref:
         description: Branch to commit to (leave empty for current branch)
         type: string