diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index c658ead..f7979c6 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -12,3 +12,8 @@ updates:
     labels: [⬆️ Lock]
     multi-ecosystem-group: lock
     patterns: ["*"]
+  - package-ecosystem: pre-commit
+    directory: "/"
+    labels: [⬆️ Lock]
+    multi-ecosystem-group: lock
+    patterns: ["*"]
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 433427a..036b1bf 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,7 +10,7 @@ repos:
       - id: check-useless-excludes
 
   - repo: https://github.com/ComPWA/policy
-    rev: 0.8.2
+    rev: 0.8.9
     hooks:
       - id: check-dev-files
         args:
@@ -43,12 +43,13 @@ repos:
       - id: taplo-format
 
   - repo: https://github.com/pappasam/toml-sort
-    rev: v0.24.3
+    rev: v0.24.4
     hooks:
       - id: toml-sort
         args: [--in-place]
 
   - repo: https://github.com/streetsidesoftware/cspell-cli
-    rev: v9.6.0
+    rev: v10.0.0
     hooks:
       - id: cspell
+        language_version: 25.9.0