diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d2e00cb5..f2aa5a72 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,17 +1,23 @@
 version: 2
 updates:
-- package-ecosystem: pip
-  directory: "/"
-  schedule:
-    interval: monthly
-  assignees:
-    - "ezio-melotti"
-  open-pull-requests-limit: 10
+  - package-ecosystem: pip
+    directory: "/"
+    schedule:
+      interval: monthly
+    assignees:
+      - "ezio-melotti"
+    groups:
+      pip:
+        patterns:
+          - "*"
 
-- package-ecosystem: "github-actions"
-  directory: "/"
-  schedule:
-    interval: monthly
-  assignees:
-    - "ezio-melotti"
-  open-pull-requests-limit: 10
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: monthly
+    assignees:
+      - "ezio-melotti"
+    groups:
+      actions:
+        patterns:
+          - "*"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
new file mode 100644
index 00000000..0dc0bab9
--- /dev/null
+++ b/.github/workflows/lint.yml
@@ -0,0 +1,21 @@
+name: Lint
+
+on: [push, pull_request, workflow_dispatch]
+
+env:
+  FORCE_COLOR: 1
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.x"
+          cache: pip
+      - uses: pre-commit/action@v3.0.1
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
new file mode 100644
index 00000000..2bb76b89
--- /dev/null
+++ b/.pre-commit-config.yaml
@@ -0,0 +1,31 @@
+repos:
+  - repo: https://github.com/pre-commit/pygrep-hooks
+    rev: v1.10.0
+    hooks:
+      - id: python-check-blanket-noqa
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.5.0
+    hooks:
+      - id: check-added-large-files
+      - id: check-case-conflict
+      - id: check-merge-conflict
+      - id: check-yaml
+      - id: debug-statements
+      - id: end-of-file-fixer
+      - id: forbid-submodules
+      - id: trailing-whitespace
+
+  - repo: https://github.com/python-jsonschema/check-jsonschema
+    rev: 0.28.1
+    hooks:
+      - id: check-dependabot
+      - id: check-github-workflows
+
+  - repo: meta
+    hooks:
+      - id: check-hooks-apply
+      - id: check-useless-excludes
+
+ci:
+  autoupdate_schedule: quarterly
diff --git a/dev-requirements.txt b/dev-requirements.txt
index f5c8d25d..a58f1d6d 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -1,6 +1,6 @@
 -r requirements.txt
 coverage
-pytest==7.4.4
-pytest-asyncio==0.23.3
+pytest==8.1.1
+pytest-asyncio==0.23.6
 pytest-aiohttp==1.0.5
-pytest-cov==4.1.0
+pytest-cov==5.0.0
diff --git a/requirements.txt b/requirements.txt
index afbe5d31..1bf61624 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,9 +1,9 @@
 cherry_picker==2.2.0
 #git+https://github.com/python/cherry-picker.git@remove-initial-state#egg=cherry_picker
-aiohttp==3.9.2
+aiohttp==3.9.3
 gidgethub==5.3.0
-cachetools==5.3.2
-redis==5.0.1
+cachetools==5.3.3
+redis==5.0.3
 celery==5.3.6
-sentry-sdk==1.39.1
+sentry-sdk==1.44.0
 click==8.1.7
diff --git a/tests/test_util.py b/tests/test_util.py
index 281a2cda..e50a93fa 100644
--- a/tests/test_util.py
+++ b/tests/test_util.py
@@ -175,4 +175,3 @@ async def test_assign_pr_to_coredev():
 
     await util.assign_pr_to_core_dev(gh, issue_number, coredev_login)
     assert gh.patch_url == f"/repos/python/cpython/issues/{issue_number}"
-