diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 36b25ec..c51468e 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -6,16 +6,31 @@ repos:
       - id: check-json
       - id: check-yaml
       - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-merge-conflict
+      - id: mixed-line-ending
+      - id: check-yaml
 
-  - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.34.0
+  - repo: https://github.com/executablebooks/mdformat
+    rev: 0.7.16
     hooks:
-      - id: markdownlint
-        entry: markdownlint --ignore .github/*.md
+      - id: mdformat
+        name: fix markdown formatting with mdformat
+        types: [markdown]
+        additional_dependencies:
+          - mdformat-gfm
+          - mdformat-toc
+          - mdformat-frontmatter
 
   - repo: https://github.com/trussworks/pre-commit-hooks
     rev: v1.1.1
     hooks:
-      - id: markdown-toc
       - id: mdspell
       - id: spelling-sort
+
+  - repo: https://github.com/shellcheck-py/shellcheck-py
+    rev: v0.9.0.2
+    hooks:
+      - id: shellcheck
+        name: lint shell scripts with shellcheck
+        types: [shell]
diff --git a/README.md b/README.md
index 020dac5..f6b40a7 100644
--- a/README.md
+++ b/README.md
@@ -1,18 +1,17 @@
 # Truss pre-commit hooks
 
-<!-- toc -->
-
-* [circleci-validate](#circleci-validate)
-* [gen-docs](#gen-docs)
-* [goreleaser-check](#goreleaser-check)
-* [markdown-toc](#markdown-toc)
-* [mdspell](#mdspell)
-* [spelling-sort](#spelling-sort)
-* [hadolint](#hadolint)
-
-<!-- Regenerate with "pre-commit run -a markdown-toc" -->
-
-<!-- tocstop -->
+<!-- mdformat-toc start --slug=github --no-anchors --maxlevel=3 --minlevel=1 -->
+
+- [Truss pre-commit hooks](#truss-pre-commit-hooks)
+  - [circleci-validate](#circleci-validate)
+  - [gen-docs](#gen-docs)
+  - [goreleaser-check](#goreleaser-check)
+  - [markdown-toc](#markdown-toc)
+  - [mdspell](#mdspell)
+  - [spelling-sort](#spelling-sort)
+  - [hadolint](#hadolint)
+
+<!-- mdformat-toc end -->
 
 ## circleci-validate
 
diff --git a/renovate.json b/renovate.json
index 39a2b6e..f0ea5fe 100644
--- a/renovate.json
+++ b/renovate.json
@@ -2,5 +2,23 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:base"
-  ]
+  ],
+  "labels": [
+    "dependencies"
+  ],
+  "packageRules": [
+    {
+      "automerge": true,
+      "matchUpdateTypes": [
+        "minor",
+        "patch",
+        "pin",
+        "digest"
+      ]
+    }
+  ],
+  "pre-commit": {
+    "enabled": true
+  },
+  "separateMinorPatch": false
 }