diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 76c0f80b..cdbec94c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,9 +6,13 @@ updates:
       interval: "monthly"
     labels:
       - "type: Maintenance"
+    cooldown:
+      default-days: 7
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "monthly"
     labels:
       - "type: Maintenance"
+    cooldown:
+      default-days: 7
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 327c41da..b5948408 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -39,9 +39,10 @@ repos:
       - id: ruff-format
 
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.19.0
+    rev: 7fc963270df722f37707d47ff41265fe8f460822 # frozen: v1.20.0
     hooks:
       - id: zizmor
+        args: ["--fix"]
 
 ci:
   # This ensures that PR's aren't autofixed by the bot, rather you call