diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 30de832..07d72cc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3.0.0
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index f76665d..697b911 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -25,7 +25,7 @@ repos:
       - id: markdownlint
         additional_dependencies: [rake]
   - repo: https://github.com/maxbrunet/pre-commit-renovate
-    rev: 36.96.3
+    rev: 36.104.0
     hooks:
       - id: renovate-config-validator
   - repo: https://github.com/mrtazz/checkmake.git
diff --git a/.tool-versions b/.tool-versions
index 0dc7177..cefa289 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -1,4 +1,4 @@
 awscli 2.13.19
 terragrunt 0.51.0
 terraform 1.5.7
-pulumi 3.83.0
+pulumi 3.85.0