diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8b3ec146..ec07c0a9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,36 +14,51 @@ concurrency:
 permissions: {}
 
 jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    env:
+      GH_TOKEN: ${{ github.token }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
+
   change-detection:
     permissions:
       contents: read
       pull-requests: read
-    uses: ./.github/workflows/reusable-change-detection.yml
+    uses: $/.github/workflows/reusable-change-detection.yml
 
   cookie:
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-cookie)
     permissions:
       contents: read
-    uses: ./.github/workflows/reusable-cookie.yml
+    uses: $/.github/workflows/reusable-cookie.yml
 
   rr-tests:
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-rr)
     permissions:
       contents: read
-    uses: ./.github/workflows/reusable-rr-tests.yml
+    uses: $/.github/workflows/reusable-rr-tests.yml
 
   docs:
     needs: change-detection
     if: fromJSON(needs.change-detection.outputs.run-docs)
     permissions:
       contents: read
-    uses: ./.github/workflows/reusable-docs.yml
+    uses: $/.github/workflows/reusable-docs.yml
 
   pass:
     if: always()
     needs:
+      - lint
       - change-detection
       - cookie
       - rr-tests
diff --git a/.github/workflows/reusable-rr-tests.yml b/.github/workflows/reusable-rr-tests.yml
index 057014bd..c4f3ff3a 100644
--- a/.github/workflows/reusable-rr-tests.yml
+++ b/.github/workflows/reusable-rr-tests.yml
@@ -46,7 +46,7 @@ jobs:
           fetch-depth: 0
 
       - name: Run sp-repo-review action
-        uses: ./
+        uses: $/
 
   cog:
     name: Run cog on README
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 1c9e4b79..9dfa263d 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -23,7 +23,7 @@ repos:
       - id: trailing-whitespace
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.16.4"
+    rev: "v0.16.5"
     hooks:
       - id: ruff-check
         args: ["--fix"]
@@ -60,19 +60,19 @@ repos:
         types_or: [yaml, html, css, scss, javascript, json]
 
   - repo: https://github.com/rvben/rumdl-pre-commit
-    rev: "v0.2.60"
+    rev: "v0.2.62"
     hooks:
       - id: rumdl
         args: [--no-exclude] # Disable all exclude patterns
 
   - repo: https://github.com/crate-ci/typos
-    rev: "v1.49.0"
+    rev: "v1.50.0"
     hooks:
       - id: typos
         exclude: ^Gemfile\.lock$
 
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: "v1.29.0"
+    rev: "v1.30.0"
     hooks:
       - id: zizmor
 
diff --git a/docs/guides/security.md b/docs/guides/security.md
index d6f7a181..bf9f8401 100644
--- a/docs/guides/security.md
+++ b/docs/guides/security.md
@@ -68,7 +68,7 @@ it as a pre-commit hook or as a GitHub Action:
 
 ```yaml
 - repo: https://github.com/zizmorcore/zizmor-pre-commit
-  rev: "v1.29.0"
+  rev: "v1.30.0"
   hooks:
     - id: zizmor
 ```
diff --git a/docs/guides/style.md b/docs/guides/style.md
index 268f4025..697a65d2 100644
--- a/docs/guides/style.md
+++ b/docs/guides/style.md
@@ -148,7 +148,7 @@ Here is the snippet to add the formatter to your `.pre-commit-config.yml`
 
 ```yaml
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: "v0.16.4"
+  rev: "v0.16.5"
   hooks:
     #  id: ruff-check would go here if using both
     - id: ruff-format
@@ -216,7 +216,7 @@ your code and your docs. Add `markdown` to the `ruff-format` hook's `types_or`:
 
 ```yaml
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: "v0.16.4"
+  rev: "v0.16.5"
   hooks:
     - id: ruff-format
       types_or: [python, pyi, jupyter, markdown, pyproject]
@@ -256,7 +256,7 @@ pre-commit hook.
 
 ```yaml
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: "v0.16.4"
+  rev: "v0.16.5"
   hooks:
     - id: ruff-check
       args: ["--fix", "--show-fixes"]
@@ -568,7 +568,7 @@ pre-commit config will work:
 
 ```yaml
 - repo: https://github.com/PyCQA/isort
-  rev: "8.0.1"
+  rev: "9.0.1"
   hooks:
     - id: isort
 ```
@@ -672,7 +672,7 @@ with `additional_dependencies`, and pass extra flags via `args`.
 :sync: ty
 ```yaml
 - repo: https://github.com/astral-sh/ty-pre-commit
-  rev: "v0.0.74"
+  rev: "v0.0.75"
   hooks:
     - id: ty
 ```
@@ -909,7 +909,7 @@ integration.
 
 ```yaml
 - repo: https://github.com/crate-ci/typos
-  rev: "v1.49.0"
+  rev: "v1.50.0"
   hooks:
     - id: typos
       args: []
@@ -990,7 +990,7 @@ following pre-commit config:
 
 ```yaml
 - repo: https://github.com/pre-commit/mirrors-clang-format
-  rev: "v22.1.8"
+  rev: "v23.1.0"
   hooks:
     - id: clang-format
       types_or: [c++, c, cuda]
diff --git a/{{cookiecutter.project_name}}/.pre-commit-config.yaml b/{{cookiecutter.project_name}}/.pre-commit-config.yaml
index cbdb8f60..2237af8a 100644
--- a/{{cookiecutter.project_name}}/.pre-commit-config.yaml
+++ b/{{cookiecutter.project_name}}/.pre-commit-config.yaml
@@ -37,7 +37,7 @@ repos:
         args: [--prose-wrap=always]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.16.4"
+    rev: "v0.16.5"
     hooks:
       - id: ruff-check
         args: ["--fix"]
@@ -47,7 +47,7 @@ repos:
 {%- if cookiecutter.backend in ["pybind11", "skbuild", "mesonpy"] %}
 
   - repo: https://github.com/pre-commit/mirrors-clang-format
-    rev: "v22.1.8"
+    rev: "v23.1.0"
     hooks:
       - id: clang-format
         types_or: [c++, c, cuda]
@@ -113,7 +113,7 @@ repos:
 {%- if cookiecutter.__ci == "github" %}
 
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: "v1.29.0"
+    rev: "v1.30.0"
     hooks:
       - id: zizmor
 {%- endif %}