diff --git a/.github/workflows/automerge.yaml b/.github/workflows/automerge.yaml
index 21e3388..b3958cb 100644
--- a/.github/workflows/automerge.yaml
+++ b/.github/workflows/automerge.yaml
@@ -24,6 +24,6 @@ permissions:
 
 jobs:
   automerge:
-    uses: nolte/gh-plumbing/.github/workflows/reusable-automerge.yaml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-automerge.yaml@v1.1.11
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/build-static-tests.yaml b/.github/workflows/build-static-tests.yaml
index 866a139..8b0aee5 100644
--- a/.github/workflows/build-static-tests.yaml
+++ b/.github/workflows/build-static-tests.yaml
@@ -12,14 +12,14 @@ permissions:
 
 jobs:
   static:
-    uses: nolte/gh-plumbing/.github/workflows/reusable-pre-commit.yaml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-pre-commit.yaml@v1.1.11
   security:
     permissions:
       contents: read # for actions/checkout to fetch code
       security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
       actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
-    uses: nolte/gh-plumbing/.github/workflows/reusable-trivy.yaml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-trivy.yaml@v1.1.11
   chain-bench:
-    uses: nolte/gh-plumbing/.github/workflows/reusable-chain-bench.yaml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-chain-bench.yaml@v1.1.11
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release-cd-refresh-master.yml b/.github/workflows/release-cd-refresh-master.yml
index 0359f0f..406547b 100644
--- a/.github/workflows/release-cd-refresh-master.yml
+++ b/.github/workflows/release-cd-refresh-master.yml
@@ -4,7 +4,7 @@ on:
 
 jobs:
   refresh_presentation_branch:
-    uses: nolte/gh-plumbing/.github/workflows/reusable-release-cd-refresh-master.yml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-release-cd-refresh-master.yml@v1.1.11
     with:
       target_branch: main
     secrets:
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index e6d98f2..dd9a2c2 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -9,6 +9,6 @@ on:
 
 jobs:
   update_release_draft:
-    uses: nolte/gh-plumbing/.github/workflows/reusable-release-drafter.yml@v1.1.10
+    uses: nolte/gh-plumbing/.github/workflows/reusable-release-drafter.yml@v1.1.11
     secrets:
       token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/chezmoi_config/dot_tool-versions b/chezmoi_config/dot_tool-versions
index 30f479e..02ab0ba 100644
--- a/chezmoi_config/dot_tool-versions
+++ b/chezmoi_config/dot_tool-versions
@@ -1,18 +1,18 @@
-act 0.2.70
+act 0.2.71
 argo 3.4.5
-argocd 2.13.2
+argocd 2.13.3
 chezmoi 2.40.0
 direnv 2.35.0
-github-cli 2.63.2
+github-cli 2.65.0
 golang 1.23.4
 gopass 1.15.5
 helm 3.16.4
-hugo 0.139.5
+hugo 0.140.2
 jq 1.6
 k9s 0.27.4
 kind 0.26.0
 kubectl 1.32.0
-kustomize 5.5.0
+kustomize 5.6.0
 mc RELEASE.2020-11-25T23-04-07Z
 packer 1.11.2
 python 3.13.1
@@ -20,8 +20,8 @@ shfmt 3.10.0
 talhelper 1.8.0
 talosctl 1.4.6
 task 3.33.1
-terraform 1.10.2
+terraform 1.10.4
 vagrant 2.3.4
 vale 3.0.1
 vendir 0.32.2
-yq 4.44.6
+yq 4.45.1
diff --git a/chezmoi_config/requirements-mkdocs.txt b/chezmoi_config/requirements-mkdocs.txt
index 2610f6c..0a4138d 100644
--- a/chezmoi_config/requirements-mkdocs.txt
+++ b/chezmoi_config/requirements-mkdocs.txt
@@ -1,4 +1,4 @@
 mkdocs==1.6.1
 mkdocs-include-markdown-plugin==7.1.2
-pymdown-extensions==10.12
+pymdown-extensions==10.14
 mkdocs-material==9.5.49