diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 1703cee..ee7405c 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-latest
     concurrency: deploy
     steps:
-      - uses: actions/checkout@v4.1.7
-      - uses: superfly/flyctl-actions/setup-flyctl@1.5
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: superfly/flyctl-actions/setup-flyctl@fc53c09e1bc3be6f54706524e3b82c4f462f77be # 1.5
       - run: flyctl deploy --remote-only
         env:
           FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 90fc295..5bee1ca 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,7 +2,7 @@ ci:
   autoupdate_schedule: monthly
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.5.7
+    rev: v0.6.2
     hooks:
       - id: ruff
       - id: ruff-format
diff --git a/requirements/base.txt b/requirements/base.txt
index 5620ff7..dd4141c 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -54,5 +54,5 @@ sqlalchemy[asyncio]==2.0.32
     # via flask-sqlalchemy-lite
 typing-extensions==4.12.2
     # via sqlalchemy
-werkzeug==3.0.3
+werkzeug==3.0.4
     # via flask
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 0649538..eb8f271 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -16,7 +16,7 @@ blinker==1.8.2
     #   flask
 build==1.2.1
     # via pip-tools
-cachetools==5.4.0
+cachetools==5.5.0
     # via tox
 cfgv==3.4.0
     # via pre-commit
@@ -110,7 +110,7 @@ pyproject-hooks==1.1.0
     # via
     #   build
     #   pip-tools
-pyright==1.1.376
+pyright==1.1.377
     # via -r typing.txt
 python-dateutil==2.9.0.post0
     # via
@@ -146,7 +146,7 @@ types-html5lib==1.1.11.20240806
     #   types-beautifulsoup4
 types-pygments==2.18.0.20240506
     # via -r typing.txt
-types-setuptools==71.1.0.20240813
+types-setuptools==73.0.0.20240822
     # via
     #   -r typing.txt
     #   types-pygments
@@ -162,7 +162,7 @@ virtualenv==20.26.3
     #   tox
 watchdog==4.0.2
     # via -r dev.in
-werkzeug==3.0.3
+werkzeug==3.0.4
     # via
     #   -r base.txt
     #   flask
diff --git a/requirements/typing.txt b/requirements/typing.txt
index 50b34b6..a3c30b9 100644
--- a/requirements/typing.txt
+++ b/requirements/typing.txt
@@ -10,7 +10,7 @@ mypy-extensions==1.0.0
     # via mypy
 nodeenv==1.9.1
     # via pyright
-pyright==1.1.376
+pyright==1.1.377
     # via -r typing.in
 types-beautifulsoup4==4.12.0.20240511
     # via -r typing.in
@@ -20,7 +20,7 @@ types-html5lib==1.1.11.20240806
     # via types-beautifulsoup4
 types-pygments==2.18.0.20240506
     # via -r typing.in
-types-setuptools==71.1.0.20240813
+types-setuptools==73.0.0.20240822
     # via types-pygments
 typing-extensions==4.12.2
     # via mypy
diff --git a/tox.ini b/tox.ini
index 436b061..994a307 100644
--- a/tox.ini
+++ b/tox.ini
@@ -22,6 +22,11 @@ commands =
     mypy
     pyright
 
+[testenv:update-actions]
+labels = update
+deps = gha-update
+commands = gha-update
+
 [testenv:update-pre_commit]
 labels = update
 deps = pre-commit