diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 7984806..c0ff4fb 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -14,15 +14,15 @@ concurrency:
 
 env:
   # renovate: datasource=pypi depName=uv
-  UV_VERSION: "0.12.24"
+  UV_VERSION: "0.13.5"
   # Minimum compatible pre-commit version; intentionally not Renovate-managed.
   MIN_PRE_COMMIT_VERSION: "3.0.0"
   # renovate: datasource=pypi depName=pre-commit
-  PRE_COMMIT_VERSION: "4.6.2"
+  PRE_COMMIT_VERSION: "4.7.0"
   # Minimum compatible prek version; intentionally not Renovate-managed.
   MIN_PREK_VERSION: "0.3.6"
   # renovate: datasource=pypi depName=prek
-  PREK_VERSION: "0.5.5"
+  PREK_VERSION: "0.5.7"
 
 jobs:
   tests:
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
         with:
           version: ${{ env.UV_VERSION }}
 
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index edcdb72..f9c84df 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -25,7 +25,7 @@ repos:
       - id: check-executables-have-shebangs
 
   - repo: https://github.com/pre-commit/pre-commit
-    rev: 9767b6c8211a6bf683875a0afcf2b390457a4b66 # frozen: v4.6.2
+    rev: 65bb884a567e8be6adc51e8bfbcf26f708eb35a2 # frozen: v4.7.0
     hooks:
       - id: validate_manifest
 
@@ -61,7 +61,7 @@ repos:
       - id: shellcheck
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: f12be1ebaa5351c1fc76472de98db2c3446c8253 # frozen: v0.16.10
+    rev: f368fb366ff7f2f808dd324b83a6d32267799e19 # frozen: v0.17.2
     hooks:
       - id: ruff-check
         args:
@@ -69,12 +69,12 @@ repos:
       - id: ruff-format
 
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 308b7fa26251088f0f2a9ad4a5b5d86e30ac5455 # frozen: 0.12.24
+    rev: eeca16c54e09b4d9a848259e46bae14737944348 # frozen: 0.13.5
     hooks:
       - id: uv-lock
 
   - repo: https://github.com/ansible/ansible-lint
-    rev: e7f397ad6dfa20d274afa17cd7bbedd84ed136f5 # frozen: v26.9.0
+    rev: 9bce2bfb8f4a984e6b13767bc0d6bf0a49492164 # frozen: v26.10.1
     hooks:
       - id: ansible-lint
 
@@ -84,18 +84,18 @@ repos:
       - id: hadolint-docker
 
   - repo: https://github.com/DavidAnson/markdownlint-cli2
-    rev: 916ad0aaa108c64d294101002066f530ea170b10 # frozen: v0.23.3
+    rev: 341e2a331ba578029e66c2e01183e7a6b5ca9ab4 # frozen: v0.24.0
     hooks:
       - id: markdownlint-cli2
 
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 4b7d8a39804edfe959711ba56b3a82bb8377d440 # frozen: 44.148.4
+    rev: cdcb45773d26450f8c77227f6b9ea2e4c1d6203d # frozen: 44.181.12
     hooks:
       - id: renovate-config-validator
         args: [--strict]
 
   - repo: https://github.com/golangci/golangci-lint
-    rev: 114493f9b3e7257d29e4130f2b4a4aadefbb6845 # frozen: v2.14.0
+    rev: 25c5369a93aacb8cccea0d46e1569ca4a194564d # frozen: v2.15.0
     hooks:
       - id: golangci-lint-config-verify
       - id: golangci-lint-fmt
diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml
index 9d367f2..03bd467 100644
--- a/.pre-commit-hooks.yaml
+++ b/.pre-commit-hooks.yaml
@@ -10,7 +10,7 @@
     # renovate: datasource=go depName=github.com/yannh/kubeconform
     - github.com/yannh/kubeconform/cmd/kubeconform@v0.8.0
     # renovate: datasource=go depName=sigs.k8s.io/kustomize/kustomize/v5
-    - sigs.k8s.io/kustomize/kustomize/v5@v5.8.2
+    - sigs.k8s.io/kustomize/kustomize/v5@v5.8.3
   types_or: [yaml, json]
 
 - id: kubeconform-kustomize
@@ -25,5 +25,5 @@
     # renovate: datasource=go depName=github.com/yannh/kubeconform
     - github.com/yannh/kubeconform/cmd/kubeconform@v0.8.0
     # renovate: datasource=go depName=sigs.k8s.io/kustomize/kustomize/v5
-    - sigs.k8s.io/kustomize/kustomize/v5@v5.8.2
+    - sigs.k8s.io/kustomize/kustomize/v5@v5.8.3
   pass_filenames: false