diff --git a/.github/actions/docker-image/action.yml b/.github/actions/docker-image/action.yml
index dbcd2a16b..69430546d 100644
--- a/.github/actions/docker-image/action.yml
+++ b/.github/actions/docker-image/action.yml
@@ -26,7 +26,7 @@ runs:
         format: sarif
         output: results.sarif
     - name: Upload Trivy scan results to GitHub Security tab
-      uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+      uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
       with:
         sarif_file: results.sarif
         category: "${{ inputs.image }}"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 9853c9e4f..1af5b1ee7 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -37,7 +37,7 @@ repos:
     hooks:
       - id: yamlfmt
   - repo: https://github.com/electrocucaracha/ai-prepare-commit-msg
-    rev: v20.0.3
+    rev: v20.3.4
     hooks:
       - id: ai-prepare-commit
         stages:
diff --git a/requirements/2025.1/debian_12.txt b/requirements/2025.1/debian_12.txt
index fa83071b3..e138c37e9 100644
--- a/requirements/2025.1/debian_12.txt
+++ b/requirements/2025.1/debian_12.txt
@@ -16,7 +16,7 @@ charset-normalizer==3.5.2
     # via requests
 cliff==4.16.0
     # via kolla-ansible
-cmd2==4.2.4
+cmd2==4.3.0
     # via cliff
 cryptography==50.0.2
     # via
diff --git a/requirements/2025.1/rocky_9.txt b/requirements/2025.1/rocky_9.txt
index f61e9b086..55a424445 100644
--- a/requirements/2025.1/rocky_9.txt
+++ b/requirements/2025.1/rocky_9.txt
@@ -16,7 +16,7 @@ charset-normalizer==3.5.2
     # via requests
 cliff==4.16.0
     # via kolla-ansible
-cmd2==4.2.4
+cmd2==4.3.0
     # via cliff
 cryptography==50.0.2
     # via