diff --git a/.github/workflows/apply-admin-safe-settings.yml b/.github/workflows/apply-admin-safe-settings.yml
index 4998d45..8a22890 100644
--- a/.github/workflows/apply-admin-safe-settings.yml
+++ b/.github/workflows/apply-admin-safe-settings.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
     # This is required to work with environment secrets in the called workflow
     secrets: inherit # zizmor: ignore[secrets-inherit]
-    uses: ./.github/workflows/libsafe-settings.yml
+    uses: $/.github/workflows/libsafe-settings.yml
     with:
       config-path: admin-safe-settings
       dry-run: ${{ inputs.dry-run }}
diff --git a/.github/workflows/apply-formula-safe-settings.yml b/.github/workflows/apply-formula-safe-settings.yml
index dc0cef4..0f8f52f 100644
--- a/.github/workflows/apply-formula-safe-settings.yml
+++ b/.github/workflows/apply-formula-safe-settings.yml
@@ -16,7 +16,7 @@ jobs:
       contents: read
     # This is required to work with environment secrets in the called workflow
     secrets: inherit # zizmor: ignore[secrets-inherit]
-    uses: ./.github/workflows/libsafe-settings.yml
+    uses: $/.github/workflows/libsafe-settings.yml
     with:
       config-path: formula-safe-settings
       dry-run: ${{ inputs.dry-run }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 33ce399..f5f4e3f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -24,12 +24,12 @@ repos:
         name: Check GitHub Actions workflows with check-jsonschema
         args: ["--verbose"]
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.29.0
+    rev: v1.30.0
     hooks:
       - id: zizmor
         name: Check GitHub Actions workflows with zizmor
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 44.39.3
+    rev: 44.66.1
     hooks:
       - id: renovate-config-validator
         name: Check Renovate config with renovate-config-validator