diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2478ca80d..b8d027028 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -24,7 +24,7 @@ repos:
     hooks:
       - id: black
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.4
+    rev: v0.11.7
     hooks:
       - id: ruff
         types: [file]
@@ -46,7 +46,7 @@ repos:
     hooks:
       - id: sphinx-lint
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.5.2
+    rev: v1.6.0
     hooks:
       - id: zizmor
   - repo: local
@@ -59,7 +59,7 @@ repos:
         additional_dependencies: ["astor", "attrs", "black", "ruff"]
         files: ^src\/trio\/_core\/(_run|(_i(o_(common|epoll|kqueue|windows)|nstrumentation)))\.py$
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.6.13
+    rev: 0.6.17
     hooks:
       # Compile requirements
       - id: pip-compile
diff --git a/test-requirements.txt b/test-requirements.txt
index 37dc7f278..2cbe7d4b8 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -132,7 +132,7 @@ requests==2.32.3
     # via sphinx
 roman-numerals-py==3.1.0 ; python_full_version >= '3.11'
     # via sphinx
-ruff==0.11.4
+ruff==0.11.7
     # via -r test-requirements.in
 setuptools==78.1.0
     # via types-setuptools
@@ -192,7 +192,7 @@ typing-extensions==4.13.0
     #   pyright
 urllib3==2.3.0
     # via requests
-uv==0.6.13
+uv==0.6.17
     # via -r test-requirements.in
 virtualenv==20.30.0
     # via pre-commit
diff --git a/zizmor.yml b/zizmor.yml
new file mode 100644
index 000000000..b1431987a
--- /dev/null
+++ b/zizmor.yml
@@ -0,0 +1,6 @@
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        # TODO: use the default policies
+        "*": any