diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 2b447037..66c54cfe 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -24,6 +24,7 @@ updates:
     directory: /CI
     schedule:
       interval: "quarterly"
+    groups:
       python:
         patterns:
           - "requirements_ci.*"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7205d8e9..ecd414aa 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -33,7 +33,7 @@ repos:
     hooks:
       - id: toml-sort-fix
   - repo: https://github.com/adrienverge/yamllint.git
-    rev: v1.37.1
+    rev: v1.38.0
     hooks:
       - id: yamllint
         args: [ '--config-file=.yamllint.yaml' ]
@@ -49,7 +49,7 @@ repos:
       - id: rst-inline-touching-normal
       - id: text-unicode-replacement-char
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.9
+    rev: v0.14.14
     hooks:
       - id: ruff-check
         args: [ '--fix', '--show-fixes' ]
@@ -75,7 +75,7 @@ repos:
         args: [ '--py39-plus' ]
         additional_dependencies: [ 'pyupgrade==3.21.2' ]
   - repo: https://github.com/kynan/nbstripout
-    rev: 0.8.2
+    rev: 0.9.0
     hooks:
       - id: nbstripout
         files: ".ipynb"
@@ -92,12 +92,12 @@ repos:
       - id: numpydoc-validation
         exclude: "^docs/|^tests/"
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.36.0
+    rev: 0.36.1
     hooks:
       - id: check-github-workflows
       - id: check-readthedocs
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.18.0
+    rev: v1.22.0
     hooks:
       - id: zizmor
         args: [ '--config=.zizmor.yml' ]