diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c658ead..f7979c6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,3 +12,8 @@ updates:
     labels: [⬆️ Lock]
     multi-ecosystem-group: lock
     patterns: ["*"]
+  - package-ecosystem: pre-commit
+    directory: "/"
+    labels: [⬆️ Lock]
+    multi-ecosystem-group: lock
+    patterns: ["*"]
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 67334ee..fc473c2 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -11,6 +11,6 @@ jobs:
   update_release_draft:
     runs-on: ubuntu-slim
     steps:
-      - uses: release-drafter/release-drafter@v6
+      - uses: release-drafter/release-drafter@v7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index e31ba66..5c8e1a6 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -12,7 +12,7 @@ repos:
       - id: check-useless-excludes
 
   - repo: https://github.com/ComPWA/policy
-    rev: 0.8.2
+    rev: 0.8.9
     hooks:
       - id: check-dev-files
         args:
@@ -20,7 +20,7 @@ repos:
           - --type-checker=ty
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.0
+    rev: v0.15.10
     hooks:
       - id: ruff-check
         args: [--fix]
@@ -58,19 +58,20 @@ repos:
       - id: taplo-format
 
   - repo: https://github.com/pappasam/toml-sort
-    rev: v0.24.3
+    rev: v0.24.4
     hooks:
       - id: toml-sort
         args:
           - --in-place
 
   - repo: https://github.com/streetsidesoftware/cspell-cli
-    rev: v9.6.0
+    rev: v10.0.0
     hooks:
       - id: cspell
+        language_version: 25.9.0
 
   - repo: https://github.com/editorconfig-checker/editorconfig-checker.python
-    rev: 3.6.0
+    rev: 3.6.1
     hooks:
       - id: editorconfig-checker
         name: editorconfig
@@ -86,7 +87,6 @@ repos:
         name: ty
         entry: ty check
         args: [--no-progress, --output-format=concise]
-        pass_filenames: false
         require_serial: true
         language: system
         types_or: [python, pyi, jupyter]