diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 87689e5..e8ccc45 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -14,7 +14,7 @@ repos:
       - id: check-yaml
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.14
+    rev: v0.15.18
     hooks:
       - id: ruff
       - id: ruff-format
@@ -22,7 +22,7 @@ repos:
   # Secret scan before push (the "general git" pre-push hook). gitleaks uses the
   # repo-root .gitleaks.toml. Runs on pre-push so it gates what leaves the machine.
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.30.1
+    rev: v8.30.0
     hooks:
       - id: gitleaks
         stages: [pre-push]