diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 06c3403b..9c85fede 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -8,7 +8,10 @@ updates:
       interval: monthly
     groups:
       actions:
-        - patterns: "*"
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 7
 
   # jupyterlab extension
   - package-ecosystem: npm
@@ -29,3 +32,5 @@ updates:
           - "*"
         update-types:
           - major
+    cooldown:
+      default-days: 7
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 58fc1b0d..c108ad6b 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,7 +3,7 @@ ci:
 
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.4
+    rev: c60c980e561ed3e73101667fe8365c609d19a438 # frozen: v0.15.9
     hooks:
       - id: ruff
         args:
@@ -24,7 +24,7 @@ repos:
   # than ruff itself
   # but has trouble with isort rules
   - repo: https://github.com/nbQA-dev/nbQA
-    rev: 1.9.1
+    rev: f96ec7f3b26a32619435686eb5813235f7e3327e # frozen: 1.9.1
     hooks:
       - id: nbqa-ruff-format
       - id: nbqa-ruff-check
@@ -33,18 +33,18 @@ repos:
           # isort rules get confused in the temporary files
           - --ignore=I
   - repo: https://github.com/rbubley/mirrors-prettier
-    rev: v3.8.1
+    rev: c2bc67fe8f8f549cc489e00ba8b45aa18ee713b1 # frozen: v3.8.1
     hooks:
       - id: prettier
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v6.0.0
+    rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # frozen: v6.0.0
     hooks:
       - id: end-of-file-fixer
       - id: check-case-conflict
       - id: check-executables-have-shebangs
       - id: requirements-txt-fixer
   - repo: https://github.com/pre-commit/mirrors-eslint
-    rev: v10.0.2
+    rev: d72e5408a82df0b0cb6b9c878fb8cb4e947c1859 # frozen: v10.2.0
     hooks:
       - id: eslint
         files: \.[jt]sx?$ # *.js, *.jsx, *.ts and *.tsx