diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6427467789..8fa7c36352 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -6,7 +6,7 @@ repos:
     hooks:
       - id: prettier
         additional_dependencies:
-          - prettier@3.3.3 # npm
+          - prettier@3.4.1 # npm
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v5.0.0
     hooks:
@@ -50,7 +50,7 @@ repos:
     hooks:
       - id: git-check
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.29.4
+    rev: 0.30.0
     hooks:
       - id: check-github-workflows
       - id: check-jsonschema
@@ -78,8 +78,8 @@ repos:
           - --output-format=pylint
         additional_dependencies:
           - prospector-profile-duplicated==1.8.0 # pypi
-          - prospector-profile-utils==1.11.1 # pypi
-          - ruff==0.7.4 # pypi
+          - prospector-profile-utils==1.12.2 # pypi
+          - ruff==0.8.1 # pypi
   - repo: https://github.com/camptocamp/jsonschema-gentypes
     rev: 2.8.1
     hooks:
@@ -150,7 +150,7 @@ repos:
           - VERSIONS-CONFIG.md
 
   - repo: https://github.com/sbrunner/jsonschema-validator
-    rev: 0.1.0
+    rev: 0.3.2
     hooks:
       - id: jsonschema-validator
         files: |-
@@ -178,11 +178,11 @@ repos:
           - --ignore-acronyms
           - --en-us
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 39.31.4
+    rev: 39.42.4
     hooks:
       - id: renovate-config-validator
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.7.4
+    rev: v0.8.1
     hooks:
       - id: ruff-format
   - repo: https://github.com/sbrunner/python-versions-hook
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 1b5db7f0cd..63eba9ab63 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -11,4 +11,4 @@ setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerabil
 jinja2>=3.1.3 # not directly required, pinned by Snyk to avoid a vulnerability
 cryptography>=42.0.8 # not directly required, pinned by Snyk to avoid a vulnerability
 zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
-tag-publish==0.9.2
+tag-publish==0.13.3