diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c5aa168..f09fbd1 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -96,7 +96,7 @@ repos:
   # single tool owns that gate (PY-PROJ-007: no overlapping tools). ruff infers the
   # upgrade target from pyproject's requires-python (>=3.14).
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: 44b5042edab9382aba712eed4f9c7bab7a3d6a3e # frozen: v0.17.0
+    rev: 38bfb07c0c64c304f47eb52090f8288150c77730 # frozen: v0.17.1
     hooks:
       # Run the linter. Upstream types_or is [python, pyi, jupyter], which matches
       # `ruff check`'s own scope: it does not lint Python inside Markdown fences
@@ -174,6 +174,6 @@ repos:
       - id: actionlint
 
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: d25b2b1dc80689fb633f21f6978bba69871181d3 # frozen: v1.31.0
+    rev: c92afdf2c6ca336aaa8f39e2bd8d48f62dbd8e1f # frozen: v1.31.1
     hooks:
       - id: zizmor