diff --git a/.github/workflows/update-binary.yml b/.github/workflows/update-binary.yml
index 0806298..c8d2d2c 100644
--- a/.github/workflows/update-binary.yml
+++ b/.github/workflows/update-binary.yml
@@ -51,7 +51,7 @@ jobs:
         persist-credentials: false
 
     - name: Setup Python ${{ matrix.python-version }}
-      uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
+      uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0  # v7.1.0
       with:
         python-version: ${{ matrix.python-version }}
         allow-prereleases: true
@@ -102,7 +102,7 @@ jobs:
         ls -1 *.zip
 
     - name: Upload build artefacts
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
+      uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9  # v7.0.2
       with:
         name: ${{ env.PYTHON_TAG }}-${{ env.STUB_PREFIX }}Stubs
         path: stub/*.zip
@@ -134,7 +134,7 @@ jobs:
         fetch-tags: true
 
     - name: Get build artifacts
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+      uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333  # v8.0.2
       with:
         path: dist
         merge-multiple: true
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7e372ff..bef17c1 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -9,11 +9,11 @@ repos:
       - id: end-of-file-fixer
       - id: trailing-whitespace
   - repo: https://github.com/rvben/rumdl-pre-commit
-    rev: v0.2.77
+    rev: v0.3.0
     hooks:
       - id: rumdl
       - id: rumdl-fmt
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.30.1
+    rev: v1.31.1
     hooks:
       - id: zizmor