diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 3aec93a..728e1a3 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,17 +27,17 @@ jobs:
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
-        uses: Homebrew/actions/setup-homebrew@c9f08aca9aec970dd6a95b67a5a49086b548ebe0 # master
+        uses: Homebrew/actions/setup-homebrew@f431f4234f84a6abc61649940bbd826437428679 # master
 
       - name: Set up git
-        uses: Homebrew/actions/git-user-config@c9f08aca9aec970dd6a95b67a5a49086b548ebe0 # master
+        uses: Homebrew/actions/git-user-config@f431f4234f84a6abc61649940bbd826437428679 # master
 
       - name: Pull bottles
         id: pr-pull
         run: brew pr-pull --debug --retain-bottle-dir --no-upload --tap="$GITHUB_REPOSITORY" "$PULL_REQUEST"
 
       - name: Generate build provenance
-        uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
+        uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 # v1.3.3
         with:
           subject-path: "${{ steps.pr-pull.outputs.bottle_path }}/*.tar.gz"
 
@@ -48,7 +48,7 @@ jobs:
         run: brew pr-upload --debug
 
       - name: Push commits
-        uses: Homebrew/actions/git-try-push@c9f08aca9aec970dd6a95b67a5a49086b548ebe0 # master
+        uses: Homebrew/actions/git-try-push@f431f4234f84a6abc61649940bbd826437428679 # master
         with:
           token: ${{ github.token }}
           branch: main
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index dfea9c1..9b9ced2 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -17,7 +17,7 @@ jobs:
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
-        uses: Homebrew/actions/setup-homebrew@c9f08aca9aec970dd6a95b67a5a49086b548ebe0 # master
+        uses: Homebrew/actions/setup-homebrew@f431f4234f84a6abc61649940bbd826437428679 # master
 
       - name: Cache Homebrew Bundler RubyGems
         id: cache
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2e9618c..aa296e6 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -22,7 +22,7 @@ repos:
       - id: trailing-whitespace
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: "0.28.6"
+    rev: "0.29.0"
     hooks:
       - id: check-github-actions
       - id: check-github-workflows