diff --git a/.coveragerc b/.coveragerc
index 6b8f4698..d5305ed4 100644
--- a/.coveragerc
+++ b/.coveragerc
@@ -4,6 +4,8 @@ omit =
   sunraster/*setup_package*
   sunraster/extern/*
   sunraster/version*
+  sunraster/_dev/*
+  */sunraster/_dev/*
   */sunraster/conftest.py
   */sunraster/*setup_package*
   */sunraster/extern/*
diff --git a/.cruft.json b/.cruft.json
index ae040fd0..73199919 100644
--- a/.cruft.json
+++ b/.cruft.json
@@ -1,6 +1,6 @@
 {
   "template": "https://github.com/sunpy/package-template",
-  "commit": "4c4701e4fe00e17a18e36e189b2928cd69983264",
+  "commit": "0c0f34c2ccd536ba8320fcda29c4d8e0f8f9adc5",
   "checkout": null,
   "context": {
     "cookiecutter": {
@@ -33,7 +33,7 @@
         ".github/workflows/sub_package_update.yml"
       ],
       "_template": "https://github.com/sunpy/package-template",
-      "_commit": "4c4701e4fe00e17a18e36e189b2928cd69983264"
+      "_commit": "0c0f34c2ccd536ba8320fcda29c4d8e0f8f9adc5"
     }
   },
   "directory": null
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 177b067f..e8eb01ec 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,3 +6,7 @@ updates:
       interval: "monthly"
     cooldown:
       default-days: 7
+    groups:
+      actions:
+        patterns:
+          - "*"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8f0b9a13..897730bc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -139,4 +139,4 @@ jobs:
       - run: ls -lha dist/
 
       - name: Run upload
-        uses: pypa/gh-action-pypi-publish@v1.13.0  # zizmor: ignore[unpinned-uses]
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
diff --git a/.github/workflows/sub_package_update.yml b/.github/workflows/sub_package_update.yml
index 74d158a1..bfb213a8 100644
--- a/.github/workflows/sub_package_update.yml
+++ b/.github/workflows/sub_package_update.yml
@@ -104,7 +104,7 @@ jobs:
       issues: write
     steps:
       - name: Open an issue if workflow fails
-        uses: actions/github-script@v8  # zizmor: ignore[unpinned-uses]
+        uses: actions/github-script@v9  # zizmor: ignore[unpinned-uses]
         with:
           github-token: ${{ github.token }}
           # This script is adapted from https://github.com/scientific-python/issue-from-pytest-log-action
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a1c01ed5..ddcbd646 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,11 +1,11 @@
 repos:
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.23.1
+    rev: v1.25.2
     hooks:
       - id: zizmor
     # This should be before any formatting hooks like isort
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.15.8"
+    rev: "v0.15.15"
     hooks:
       - id: ruff
         args: ["--fix"]