diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 294b13743e2..ef52314264e 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -9,9 +9,13 @@ updates:
   allow:
   - dependency-type: direct
   - dependency-type: indirect
+  cooldown:
+    default-days: 7
 - package-ecosystem: github-actions
   directory: /
   schedule:
     interval: weekly
     time: "03:00"
   open-pull-requests-limit: 10
+  cooldown:
+    default-days: 7
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a4af51ee0f2..0e82c4f7426 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: "v0.14.3"
+  rev: "v0.14.4"
   hooks:
     - id: ruff-check
       args: ["--fix"]
@@ -12,9 +12,10 @@ repos:
     -   id: end-of-file-fixer
     -   id: check-yaml
 - repo: https://github.com/woodruffw/zizmor-pre-commit
-  rev: v1.16.2
+  rev: v1.16.3
   hooks:
     - id: zizmor
+      args: ["--fix"]
 -   repo: https://github.com/adamchainz/blacken-docs
     rev: 1.20.0
     hooks:
@@ -66,13 +67,13 @@ repos:
         # Manual because passing pyright is a work in progress.
         stages: [manual]
 - repo: https://github.com/tox-dev/pyproject-fmt
-  rev: "v2.11.0"
+  rev: "v2.11.1"
   hooks:
     - id: pyproject-fmt
       # https://pyproject-fmt.readthedocs.io/en/latest/#calculating-max-supported-python-version
       additional_dependencies: ["tox>=4.9"]
 -   repo: https://github.com/asottile/pyupgrade
-    rev: v3.21.0
+    rev: v3.21.1
     hooks:
     -   id: pyupgrade
         args: