diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index ba9e48f3..5e68aae0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -13,6 +13,8 @@ updates:
       actions:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: pip
     directory: /
@@ -25,3 +27,5 @@ updates:
       python:
         patterns:
           - "pyproject.toml"
+    cooldown:
+      default-days: 7
diff --git a/.github/workflows/testdata-version.yml b/.github/workflows/testdata-version.yml
index a86434f9..26645708 100644
--- a/.github/workflows/testdata-version.yml
+++ b/.github/workflows/testdata-version.yml
@@ -19,6 +19,7 @@ jobs:
     if: |
      (github.event.pull_request.head.repo.full_name == github.event.pull_request.base.repo.full_name)
     permissions:
+      # Needed in order to leave comments on pull requests
       pull-requests: write
     steps:
       - name: Harden Runner
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c2549505..da636742 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,7 +3,7 @@ default_language_version:
 
 repos:
   - repo: https://github.com/asottile/pyupgrade
-    rev: v3.21.0
+    rev: v3.21.2
     hooks:
       - id: pyupgrade
         args: [ '--py39-plus' ]
@@ -49,7 +49,7 @@ repos:
       - id: rst-inline-touching-normal
       - id: text-unicode-replacement-char
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.3
+    rev: v0.14.7
     hooks:
       - id: ruff-check
         args: [ '--fix', '--show-fixes' ]
@@ -73,9 +73,9 @@ repos:
     hooks:
       - id: nbqa-pyupgrade
         args: [ '--py39-plus' ]
-        additional_dependencies: [ 'pyupgrade==3.20.0' ]
+        additional_dependencies: [ 'pyupgrade==3.21.2' ]
   - repo: https://github.com/kynan/nbstripout
-    rev: 0.8.1
+    rev: 0.8.2
     hooks:
       - id: nbstripout
         files: ".ipynb"
@@ -92,17 +92,17 @@ repos:
       - id: numpydoc-validation
         exclude: "^docs/|^tests/"
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.34.1
+    rev: 0.35.0
     hooks:
       - id: check-github-workflows
       - id: check-readthedocs
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.16.2
+    rev: v1.18.0
     hooks:
       - id: zizmor
         args: [ '--config=.zizmor.yml' ]
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.28.0
+    rev: v8.30.0
     hooks:
       - id: gitleaks
   - repo: meta
diff --git a/pyproject.toml b/pyproject.toml
index cc314590..1125aece 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -85,6 +85,7 @@ dev = [
   "pytest-xdist >=3.2.0",
   "requests >=2.32.2",
   "ruff >=0.14.3",
+  "setuptools >=71.0.0",
   "tox >=4.30.3",
   "vulture >=2.14",
   "watchdog >=4.0.0"
diff --git a/tox.toml b/tox.toml
index f63e935a..c8a32851 100644
--- a/tox.toml
+++ b/tox.toml
@@ -3,12 +3,6 @@ envlist = [
   "py3.{10,11,12,13}",
   "docs"
 ]
-requires = [
-  "flit >= 3.11.0,<4.0",
-  "pip >= 25.2",
-  "setuptools >= 71.0",
-  "tox >= 4.30.3"
-]
 skip_missing_interpreters = true
 
 [env.docs]
@@ -45,7 +39,7 @@ passenv = ["CI", "COVERALLS_*", "GDAL_VERSION", "GITHUB_*", "LD_LIBRARY_PATH", "
 extras = ["dev", "gis", "raven-hydro"]
 download = true
 install_command = ["python", "-m", "pip", "install", "--no-user", "{opts}", "{packages}"]
-deps = ["numpy >= 1.25.0", "gdal == {env:GDAL_VERSION}"]
+deps = ["numpy >= 1.25.0", "gdal == {env:GDAL_VERSION}.*"]
 commands_pre = [
   ["python", "-m", "pip", "list"],
   ["python", "-m", "pip", "check"]