diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 09bf514..b559575 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -85,7 +85,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=zricethezav/gitleaks
   - repo: https://github.com/zricethezav/gitleaks
-    rev: "v8.28.0"
+    rev: "v8.30.0"
     hooks:
       - id: gitleaks
   # renovate: datasource=github-tags depName=stefmolin/exif-stripper
@@ -97,7 +97,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=commitizen-tools/commitizen
   - repo: https://github.com/commitizen-tools/commitizen
-    rev: v4.9.1
+    rev: v4.11.0
     hooks:
       - id: commitizen
         language: python
@@ -105,7 +105,7 @@ repos:
           - commit-msg
   # renovate: datasource=github-tags depName=editorconfig-checker/editorconfig-checker.python
   - repo: https://github.com/editorconfig-checker/editorconfig-checker.python
-    rev: "3.4.0"
+    rev: "3.6.0"
     hooks:
       - id: editorconfig-checker
         name: Check editorconfig compliance
@@ -119,22 +119,23 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=hukkin/mdformat
   - repo: https://github.com/hukkin/mdformat
-    rev: 0.7.22
+    rev: 1.0.0
     hooks:
       - id: mdformat
         additional_dependencies:
           - mdformat-gfm
-          - mdformat-frontmatter
+          - mdformat-front-matters
           - mdformat-footnote
           - mdformat-gfm-alerts
-          - mdformat-tables
+          # - mdformat-tables # now included in mdformat-gfm
           - mdformat-toc
           - mdformat-config
           - mdformat-ruff
           # - mdformat-shfmt # disable until can pass args (ref: https://github.com/hukkin/mdformat-shfmt/issues/7)
+          - mdformat-simple-breaks
   # renovate: datasource=github-tags depName=igorshubovych/markdownlint-cli
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: "v0.45.0"
+    rev: "v0.47.0"
     hooks:
       - id: markdownlint
         name: Lint markdown files
@@ -152,7 +153,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=kynan/nbstripout
   - repo: https://github.com/kynan/nbstripout
-    rev: 0.8.1
+    rev: 0.8.2
     hooks:
       - id: nbstripout
         name: Strip metadata and outputs from ipynb files
@@ -183,7 +184,7 @@ repos:
   ### In this case, comment out this block until ".typos.toml" has been committed successfully
   # renovate: datasource=github-tags depName=crate-ci/typos
   - repo: https://github.com/crate-ci/typos
-    rev: "v1.38.1"
+    rev: "v1.40.1"
     hooks:
       - id: typos
         name: Spellcheck with Typos
diff --git a/.ruff.toml b/.ruff.toml
index 1861881..16aaca9 100644
--- a/.ruff.toml
+++ b/.ruff.toml
@@ -87,7 +87,7 @@ ignore = [
   "Q002",  # redundant w formatter
   "Q003",  # redundant w formatter
   # "S101",  # assert
-  "S311",  # allow psuedorandom generators (we use for stats)
+  "S311",  # allow pseudorandom generators (we use for stats)
   "SIM105",  # allow except: pass
   "TRY003",  # Avoid specifying messages outside exception class; overly strict, especially for ValueError
   "TRY201",  # Allow raise without exception name (align with Sonarlint)
diff --git a/template/.pre-commit-config.yaml.jinja b/template/.pre-commit-config.yaml.jinja
index 25fe614..b6639ac 100644
--- a/template/.pre-commit-config.yaml.jinja
+++ b/template/.pre-commit-config.yaml.jinja
@@ -87,7 +87,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=zricethezav/gitleaks
   - repo: https://github.com/zricethezav/gitleaks
-    rev: "v8.28.0"
+    rev: "v8.30.0"
     hooks:
       - id: gitleaks
   # renovate: datasource=github-tags depName=stefmolin/exif-stripper
@@ -100,7 +100,7 @@ repos:
   {%- if conventional_commits %}
   # renovate: datasource=github-tags depName=commitizen-tools/commitizen
   - repo: https://github.com/commitizen-tools/commitizen
-    rev: v4.9.1
+    rev: v4.11.0
     hooks:
       - id: commitizen
         language: python
@@ -109,7 +109,7 @@ repos:
   {%- endif %}{% if editorconfig %}
   # renovate: datasource=github-tags depName=editorconfig-checker/editorconfig-checker.python
   - repo: https://github.com/editorconfig-checker/editorconfig-checker.python
-    rev: "3.4.0"
+    rev: "3.6.0"
     hooks:
       - id: editorconfig-checker
         name: Check editorconfig compliance
@@ -124,22 +124,23 @@ repos:
   {%- endif %}{% if markdown %}
   # renovate: datasource=github-tags depName=hukkin/mdformat
   - repo: https://github.com/hukkin/mdformat
-    rev: 0.7.22
+    rev: 1.0.0
     hooks:
       - id: mdformat
         additional_dependencies:
           - mdformat-gfm
-          - mdformat-frontmatter
+          - mdformat-front-matters
           - mdformat-footnote
           - mdformat-gfm-alerts
-          - mdformat-tables
+          # - mdformat-tables # now included in mdformat-gfm
           - mdformat-toc
           - mdformat-config
           - mdformat-ruff
           # - mdformat-shfmt # disable until can pass args (ref: https://github.com/hukkin/mdformat-shfmt/issues/7)
+          - mdformat-simple-breaks
   # renovate: datasource=github-tags depName=igorshubovych/markdownlint-cli
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: "v0.45.0"
+    rev: "v0.47.0"
     hooks:
       - id: markdownlint
         name: Lint markdown files
@@ -158,7 +159,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=kynan/nbstripout
   - repo: https://github.com/kynan/nbstripout
-    rev: 0.8.1
+    rev: 0.8.2
     hooks:
       - id: nbstripout
         name: Strip metadata and outputs from ipynb files
@@ -184,7 +185,7 @@ repos:
         stages: [pre-commit]
   # renovate: datasource=github-tags depName=scop/pre-commit-shfmt versioning=loose
   - repo: https://github.com/scop/pre-commit-shfmt
-    rev: "v3.8.0-1"
+    rev: "v3.12.0-2"
     hooks:
       - id: shfmt
         name: Format shell scripts
@@ -224,7 +225,7 @@ repos:
   ### In this case, comment out this block until ".typos.toml" has been committed successfully
   # renovate: datasource=github-tags depName=crate-ci/typos
   - repo: https://github.com/crate-ci/typos
-    rev: "v1.38.1"
+    rev: "v1.40.1"
     hooks:
       - id: typos
         name: Spellcheck with Typos