diff --git a/.github/actions/bump_version/requirements.txt b/.github/actions/bump_version/requirements.txt
index 6ffd90cb..baa62859 100644
--- a/.github/actions/bump_version/requirements.txt
+++ b/.github/actions/bump_version/requirements.txt
@@ -13,4 +13,4 @@
 --prefer-binary
 
 bump-my-version >= 1.3.0
-pre-commit >= 4.0.1
+pre-commit >= 4.6.0
diff --git a/.github/workflows/tag_and_release.yml b/.github/workflows/tag_and_release.yml
index abd549f6..a92b9742 100644
--- a/.github/workflows/tag_and_release.yml
+++ b/.github/workflows/tag_and_release.yml
@@ -93,7 +93,7 @@ jobs:
     steps:
     - name: Import signing certificate to keychain
       if: runner.os == 'macOS'
-      uses: Apple-Actions/import-codesign-certs@fe74d46e82474f87e1ba79832ad28a4013d0e33a # v6.1.0
+      uses: Apple-Actions/import-codesign-certs@5142e029c445c10ffc7149d172e540235a065466 # v7.0.0
       with:
         p12-file-base64: ${{ secrets.CODESIGN_CERT_FILE_BASE64 }}
         p12-password: ${{ secrets.CODESIGN_CERT_PASSWORD }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c9057299..3ef8cace 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -98,11 +98,11 @@ repos:
 
     # C++ formatting & linting
 - repo: https://github.com/pre-commit/mirrors-clang-format
-  rev: v22.1.3
+  rev: v22.1.4
   hooks:
   - id: clang-format
     exclude_types: [json]
-    additional_dependencies: [clang-format>=22.1.3]
+    additional_dependencies: [clang-format>=22.1.4]
 - repo: https://github.com/pocc/pre-commit-hooks
   rev: v1.3.5
   hooks:
diff --git a/config/lichess/Dockerfile b/config/lichess/Dockerfile
index 7e36e918..bf3f2be4 100644
--- a/config/lichess/Dockerfile
+++ b/config/lichess/Dockerfile
@@ -12,7 +12,7 @@
 
 # This Dockerfile expects the context to be the repo root
 
-FROM lichessbotdevs/lichess-bot:2026.4.15.1
+FROM lichessbotdevs/lichess-bot:2026.4.20.1
 
 ARG CMAKE_VERSION=4.2.3
 ARG CMAKE_PRESET=clang
diff --git a/config/requirements.txt b/config/requirements.txt
index 475e7c10..39fbbeb2 100644
--- a/config/requirements.txt
+++ b/config/requirements.txt
@@ -12,11 +12,11 @@
 
 --prefer-binary
 
-clang-tidy >= 21.1.0
-cmake >= 3.31.0
+clang-tidy >= 22.1.0.1
+cmake >= 4.3.2
 cppcheck >= 1.5.1
 cpplint >= 2.0.2
 hadolint-bin >= 2.14.0
-ninja >= 1.11.1.3
-pre-commit >= 4.0.1
-rust-just >= 1.39.0
+ninja >= 1.13.0
+pre-commit >= 4.6.0
+rust-just >= 1.50.0
diff --git a/tests/position-solver/requirements.txt b/tests/position-solver/requirements.txt
index bcb218b3..372b2965 100644
--- a/tests/position-solver/requirements.txt
+++ b/tests/position-solver/requirements.txt
@@ -13,4 +13,4 @@
 --prefer-binary
 
 python-chess >= 1.999
-tqdm >= 4.67.1
+tqdm >= 4.67.3