diff --git a/.github/workflows/python.yaml b/.github/workflows/python.yaml
index d089431..a8847e8 100644
--- a/.github/workflows/python.yaml
+++ b/.github/workflows/python.yaml
@@ -98,14 +98,24 @@ jobs:
         with:
           token: ${{ steps.generate-token.outputs.token }}
           ref: ${{github.event.pull_request.head.ref}}
-      - name: Install poetry
-        run: pipx install poetry
       - name: Set up python
         id: setup-python
         uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
-          cache: "poetry"
+      - name: Install poetry
+        run: pipx install poetry==2.3.2 || pipx upgrade poetry
+        env:
+          PIPX_DEFAULT_PYTHON: ${{ steps.setup-python.outputs.python-path }}
+      - name: Cache Poetry artifacts
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/pypoetry/artifacts
+            ~/.cache/pip
+          key: poetry-${{ runner.os }}-${{ hashFiles('poetry.lock') }}
+          restore-keys: |
+            poetry-${{ runner.os }}-
       - name: Install packages
         run: |
           make lint-setup
@@ -132,14 +142,24 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
-      - name: Install poetry
-        run: pipx install poetry
       - name: Set up python
         id: setup-python
         uses: actions/setup-python@v6
         with:
           python-version-file: "pyproject.toml"
-          cache: "poetry"
+      - name: Install poetry
+        run: pipx install poetry==2.3.2 || pipx upgrade poetry
+        env:
+          PIPX_DEFAULT_PYTHON: ${{ steps.setup-python.outputs.python-path }}
+      - name: Cache Poetry artifacts
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/pypoetry/artifacts
+            ~/.cache/pip
+          key: poetry-${{ runner.os }}-${{ hashFiles('poetry.lock') }}
+          restore-keys: |
+            poetry-${{ runner.os }}-
       - name: Install packages
         run: |
           make dev-setup
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index a05b00d..4706e54 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,9 +1,10 @@
 # GitHub Workflows Release Notes
 
-## 0.0.3-dev - 2026-02-12
+## 0.0.3-dev - 2026-02-13
 
 ### Features
 
+- python workflow: ensure python version consistency (PR #246 by @chicco785)
 - add-to-project wf: add stale issues bot (PR #231 by @chicco785)
 - support ALL for deployment (PR #222 by @chicco785)
 - Support secret injection via .env during docker image build (PR #220 by
@@ -85,12 +86,12 @@
 
 ### Dependencies
 
+- Bump reproducible-containers/buildkit-cache-dance from 3.3.0 to 3.3.1 (PR #244
+  by @dependabot[bot])
 - Bump WyriHaximus/github-action-get-previous-tag from 1 to 2 (PR #245 by
   @dependabot[bot])
 - Bump aws-actions/configure-aws-credentials from 5 to 6 (PR #243 by
   @dependabot[bot])
-- Bump reproducible-containers/buildkit-cache-dance from 3.3.0 to 3.3.1 (PR #244
-  by @dependabot[bot])
 - Bump dawidd6/action-download-artifact from 12 to 14 (PR #241 by
   @dependabot[bot])
 - Bump dawidd6/action-download-artifact from 11 to 12 (PR #227 by