diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 3f8d56c3..89e159cd 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -9,8 +9,8 @@ jobs:
     outputs:
       hash: ${{ steps.hash.outputs.hash }}
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
-      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: '3.x'
           cache: pip
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 0ee58644..5025b094 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -33,8 +33,8 @@ jobs:
           - {name: Minimum Versions, python: '3.12', tox: py-min}
           - {name: Development Versions, python: '3.9', tox: py-dev}
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
-      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: ${{ matrix.python }}
           allow-prereleases: true
@@ -45,14 +45,14 @@ jobs:
   typing:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
-      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: '3.x'
           cache: pip
           cache-dependency-path: requirements*/*.txt
       - name: cache mypy
-        uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
         with:
           path: ./.mypy_cache
           key: mypy|${{ hashFiles('pyproject.toml') }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 031f3014..74b54e8f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,7 +2,7 @@ ci:
   autoupdate_schedule: monthly
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.7.0
+    rev: v0.7.1
     hooks:
       - id: ruff
       - id: ruff-format
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 6077ec03..30009beb 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -72,7 +72,7 @@ markupsafe==3.0.2
     # via
     #   -r docs.txt
     #   jinja2
-mypy==1.12.0
+mypy==1.13.0
     # via -r typing.txt
 mypy-extensions==1.0.0
     # via
@@ -93,7 +93,7 @@ packaging==24.1
     #   pytest
     #   sphinx
     #   tox
-pallets-sphinx-themes==2.2.0
+pallets-sphinx-themes==2.3.0
     # via -r docs.txt
 platformdirs==4.3.6
     # via
@@ -118,7 +118,7 @@ pygments==2.18.0
     #   sphinx-tabs
 pyproject-api==1.8.0
     # via tox
-pyright==1.1.385
+pyright==1.1.386
     # via -r typing.txt
 pytest==8.3.3
     # via
@@ -177,7 +177,7 @@ sphinxcontrib-serializinghtml==2.0.0
     # via
     #   -r docs.txt
     #   sphinx
-tox==4.23.0
+tox==4.23.2
     # via -r dev.in
 types-contextvars==2.4.7.3
     # via -r typing.txt
diff --git a/requirements/docs.txt b/requirements/docs.txt
index bc79f2a0..0e947c99 100644
--- a/requirements/docs.txt
+++ b/requirements/docs.txt
@@ -28,7 +28,7 @@ packaging==24.1
     # via
     #   pallets-sphinx-themes
     #   sphinx
-pallets-sphinx-themes==2.2.0
+pallets-sphinx-themes==2.3.0
     # via -r docs.in
 pygments==2.18.0
     # via
diff --git a/requirements/typing.txt b/requirements/typing.txt
index 83e75deb..16989230 100644
--- a/requirements/typing.txt
+++ b/requirements/typing.txt
@@ -12,7 +12,7 @@ cryptography==43.0.3
     # via -r typing.in
 iniconfig==2.0.0
     # via pytest
-mypy==1.12.0
+mypy==1.13.0
     # via -r typing.in
 mypy-extensions==1.0.0
     # via mypy
@@ -24,7 +24,7 @@ pluggy==1.5.0
     # via pytest
 pycparser==2.22
     # via cffi
-pyright==1.1.385
+pyright==1.1.386
     # via -r typing.in
 pytest==8.3.3
     # via -r typing.in