diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 8fd9b7f4ae..8e2d7193ae 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -6,8 +6,9 @@ version: 2
 updates:
   - package-ecosystem: github-actions
     directory: /
+    # https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#scheduleinterval
     schedule:
-      interval: daily
+      interval: monthly
     open-pull-requests-limit: 1
     labels:
       - tag:bot
diff --git a/.github/workflows/pre-commit-autoupdate.yaml b/.github/workflows/pre-commit-autoupdate.yaml
index 489e32a1de..60c17d9dab 100644
--- a/.github/workflows/pre-commit-autoupdate.yaml
+++ b/.github/workflows/pre-commit-autoupdate.yaml
@@ -6,7 +6,7 @@ name: pre-commit-autoupdate
 
 on:
   schedule:
-    - cron: 0 0 * * *
+    - cron: 0 0 1 1,4,7,10 * # quarterly
   workflow_dispatch:
 
 jobs:
diff --git a/.github/workflows/pre-commit-optional-autoupdate.yaml b/.github/workflows/pre-commit-optional-autoupdate.yaml
index be79ad481d..6639e5ca6c 100644
--- a/.github/workflows/pre-commit-optional-autoupdate.yaml
+++ b/.github/workflows/pre-commit-optional-autoupdate.yaml
@@ -6,7 +6,7 @@ name: pre-commit-optional-autoupdate
 
 on:
   schedule:
-    - cron: 0 0 * * *
+    - cron: 0 0 1 1,4,7,10 * # quarterly
   workflow_dispatch:
 
 jobs:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index e6dcc3f464..a87ad293fd 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,12 +2,16 @@
 # https://github.com/autowarefoundation/sync-file-templates
 # To make changes, update the source repository and follow the guidelines in its README.
 
+# https://pre-commit.ci/#configuration
 ci:
   autofix_commit_msg: "style(pre-commit): autofix"
+  # we already have our own daily update mechanism, we set this to quarterly
+  autoupdate_schedule: quarterly
+  autoupdate_commit_msg: "ci(pre-commit): quarterly autoupdate"
 
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.6.0
+    rev: v5.0.0
     hooks:
       - id: check-json
       - id: check-merge-conflict
@@ -22,7 +26,7 @@ repos:
         args: [--markdown-linebreak-ext=md]
 
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.41.0
+    rev: v0.43.0
     hooks:
       - id: markdownlint
         args: [-c, .markdownlint.yaml, --fix]
@@ -53,7 +57,7 @@ repos:
       - id: shellcheck
 
   - repo: https://github.com/scop/pre-commit-shfmt
-    rev: v3.9.0-1
+    rev: v3.10.0-2
     hooks:
       - id: shfmt
         args: [-w, -s, -i=4]
@@ -64,26 +68,26 @@ repos:
       - id: isort
 
   - repo: https://github.com/psf/black
-    rev: 24.8.0
+    rev: 24.10.0
     hooks:
       - id: black
         args: [--line-length=100]
 
   - repo: https://github.com/pre-commit/mirrors-clang-format
-    rev: v18.1.8
+    rev: v19.1.4
     hooks:
       - id: clang-format
         types_or: [c++, c, cuda]
 
   - repo: https://github.com/cpplint/cpplint
-    rev: 1.6.1
+    rev: 2.0.0
     hooks:
       - id: cpplint
         args: [--quiet]
         exclude: .cu
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.29.2
+    rev: 0.30.0
     hooks:
       - id: check-metaschema
         files: ^.+/schema/.*schema\.json$
diff --git a/CPPLINT.cfg b/CPPLINT.cfg
index 81869c92be..159042dba0 100644
--- a/CPPLINT.cfg
+++ b/CPPLINT.cfg
@@ -7,10 +7,12 @@ set noparent
 linelength=100
 includeorder=standardcfirst
 filter=-build/c++11               # we do allow C++11
+filter=-build/c++17               # we allow <filesystem>
 filter=-build/namespaces_literals # we allow using namespace for literals
 filter=-runtime/references        # we consider passing non-const references to be ok
 filter=-whitespace/braces         # we wrap open curly braces for namespaces, classes and functions
 filter=-whitespace/indent         # we don't indent keywords like public, protected and private with one space
+filter=-whitespace/newline        # we allow the developer to decide about newline at the end of file (it's clashing with clang-format)
 filter=-whitespace/parens         # we allow closing parenthesis to be on the next line
 filter=-whitespace/semicolon      # we allow the developer to decide about whitespace after a semicolon
 filter=-build/header_guard        # we automatically fix the names of header guards using pre-commit