diff --git a/.github/workflows/publish-bundle-rke2.yaml b/.github/workflows/publish-bundle-rke2.yaml
index 96b85ffc..ae0aaa03 100644
--- a/.github/workflows/publish-bundle-rke2.yaml
+++ b/.github/workflows/publish-bundle-rke2.yaml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           token: ${{ secrets.PAT }}
           repository: ${{ github.repository }}
@@ -27,14 +27,14 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: Login to Registry1
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: registry1.dso.mil
           username: ${{ secrets.IRON_BANK_ROBOT_USERNAME }}
           password: ${{ secrets.IRON_BANK_ROBOT_PASSWORD }}
 
       - name: Init zarf cache
-        uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
         with:
           path: "~/.zarf-cache"
           key: zarf-cache
@@ -50,7 +50,7 @@ jobs:
           df -h
 
       - name: Login to GHCR
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 17838d62..1e7a8270 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,7 +3,7 @@ repos:
   # GENERAL CHECKS
   ################
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.0.1
+    rev: v5.0.0
     hooks:
       - id: check-added-large-files
         name: Large Files Check
@@ -26,7 +26,7 @@ repos:
         args: [--markdown-linebreak-ext=md]
 
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.18.0
+    rev: v8.21.2
     hooks:
       - id: gitleaks
         name: GitLeaks Checks
diff --git a/renovate.json b/renovate.json
index 4e238b4e..aecedc49 100644
--- a/renovate.json
+++ b/renovate.json
@@ -4,12 +4,8 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "github>defenseunicorns/uds-common//config/renovate.json5",
-    ":semanticPrefixFixDepsChoreOthers",
-    "config:base",
-    "replacements:all",
-    "workarounds:all"
+    "config:recommended",
+    ":disableRateLimiting"
   ],
-  "pre-commit": {
-    "enabled": true
-  }
+  "pre-commit": {"enabled": true}
 }