diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2ceadd1..fd2d5bb 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -16,7 +16,7 @@ repos:
 
   # ruff - linting + formatting
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.9.10"
+    rev: "v0.12.0"
     hooks:
       - id: ruff
         name: ruff
@@ -25,7 +25,7 @@ repos:
 
   # mypy - lint-like type checking
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.15.0
+    rev: v1.16.1
     hooks:
       - id: mypy
         name: mypy
@@ -53,7 +53,7 @@ repos:
 
   # bandit - find common security issues
   - repo: https://github.com/pycqa/bandit
-    rev: 1.8.3
+    rev: 1.8.5
     hooks:
       - id: bandit
         name: bandit
diff --git a/.python-version b/.python-version
index 3e388a4..86f8c02 100644
--- a/.python-version
+++ b/.python-version
@@ -1 +1 @@
-3.13.2
+3.13.5
diff --git a/Dockerfile b/Dockerfile
index c2e3e2d..88216ec 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.13.2-slim-bookworm AS python-base
+FROM python:3.13.5-slim-bookworm AS python-base
 
 ENV PYTHONUNBUFFERED=1 \
     PYTHONDONTWRITEBYTECODE=1 \
@@ -9,7 +9,7 @@ ENV PATH="$VIRTUAL_ENV/bin:$PATH"
 
 FROM python-base AS builder-base
 
-COPY --from=ghcr.io/astral-sh/uv:0.6.5 /uv /uvx /bin/
+COPY --from=ghcr.io/astral-sh/uv:0.7.13 /uv /uvx /bin/
 
 WORKDIR $WORKDIR_PATH