diff --git a/.coderabbit.yaml b/.coderabbit.yaml
index 4b7022bc..8215e88f 100644
--- a/.coderabbit.yaml
+++ b/.coderabbit.yaml
@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
 reviews:
   profile: assertive
   path_instructions:
@@ -18,3 +19,14 @@ reviews:
       enabled: false
     flake8: # we use ruff instead (when we use Python)
       enabled: false
+  poem: false
+  # the commit status is driven by our repository config and required checks, we don't want CodeRabbit messing with it
+  commit_status: false
+  auto_review:
+    # a main purpose of opening a draft PR might be to get CodeRabbit feedback early
+    drafts: true
+  finishing_touches:
+    docstrings:
+      enabled: false # if we wanted AI to generate docstrings, it would be via CLI, not in the GitHub interface
+    unit_tests:
+      enabled: false # Quis custodiet ipsos custodes? not something we want AI doing, especially not via the GitHub interface
diff --git a/extensions/context.py b/extensions/context.py
index 2024a3ca..cf25ebe9 100644
--- a/extensions/context.py
+++ b/extensions/context.py
@@ -25,13 +25,13 @@ def hook(self, context: dict[Any, Any]) -> dict[Any, Any]:
         context["pytest_cov_version"] = "7.0.0"
         #######
         context["sphinx_version"] = "8.1.3"
-        context["pulumi_version"] = "3.204.0"
+        context["pulumi_version"] = "3.205.0"
         context["pulumi_aws_version"] = "7.10.0"
         context["pulumi_aws_native_version"] = "1.37.0"
         context["pulumi_command_version"] = "1.1.3"
-        context["pulumi_github_version"] = "6.7.4"
-        context["pulumi_okta_version"] = "6.0.0"
-        context["boto3_version"] = "1.40.60"
+        context["pulumi_github_version"] = "6.8.0"
+        context["pulumi_okta_version"] = "6.1.0"
+        context["boto3_version"] = "1.40.57"
         context["ephemeral_pulumi_deploy_version"] = "0.0.5"
         context["pydantic_version"] = "2.12.3"
         context["pyinstaller_version"] = "6.16.0"