diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 095b018..5c673eb 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -40,7 +40,7 @@ repos:
 
   # Linter and formatter
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.7.2
+    rev: v0.8.0
     hooks:
       - id: ruff
         args:
@@ -56,7 +56,7 @@ repos:
 
   # Security linter
   - repo: https://github.com/pycqa/bandit
-    rev: 1.7.10
+    rev: 1.8.0
     hooks:
       - id: bandit
         name: bandit
@@ -76,6 +76,6 @@ repos:
 
   # renovate.json validator
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 39.0.0
+    rev: 39.35.0
     hooks:
       - id: renovate-config-validator
diff --git a/Containerfile b/Containerfile
index 8a36748..d548958 100644
--- a/Containerfile
+++ b/Containerfile
@@ -1,4 +1,4 @@
-FROM quay.io/fedora/python-313:20241106@sha256:8fcd24b44a124986b54e81b79a959c1fe542edb43e537dde47141ef473532423 AS builder
+FROM quay.io/fedora/python-313:20241127@sha256:6e2c04e54359b55d1424ff43496d4d6a35f37812570501d91e3b9e00ab9f18b3 AS builder
 
 # builder should use root to install/create all files
 USER root
diff --git a/pyproject.toml b/pyproject.toml
index e442f9a..06b842e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -28,7 +28,7 @@ Jinja2 = "^3.1.4"
 [tool.poetry.group.dev.dependencies]
 requests-mock = "^1.12.1"
 pytest = "^8.3.3"
-pytest-cov = "^5.0.0"
+pytest-cov = "^6.0.0"
 
 [tool.poetry.scripts]
 retasc = "retasc.__main__:main"