diff --git a/.github/workflows/code_ql.yml b/.github/workflows/code_ql.yml
index 888bb32e..267f0969 100644
--- a/.github/workflows/code_ql.yml
+++ b/.github/workflows/code_ql.yml
@@ -47,14 +47,14 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4
+      uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
       with:
         languages: ${{ matrix.language }}
         build-mode: none
         queries: security-and-quality
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4
+      uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
       with:
         category: "/language:${{matrix.language}}"
 
@@ -69,7 +69,7 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4
+      uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
       with:
         languages: c-cpp
         build-mode: manual
@@ -81,6 +81,6 @@ jobs:
         build_config: Debug
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4
+      uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
       with:
         category: "/language:c-cpp"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 402a59b7..ed124df0 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -139,7 +139,7 @@ repos:
   - id: pyupgrade
 
 - repo: https://github.com/psf/black-pre-commit-mirror
-  rev: 26.5.0
+  rev: 26.5.1
   hooks:
   - id: black
 
diff --git a/config/lichess/Dockerfile b/config/lichess/Dockerfile
index d8d32b62..ec745a98 100644
--- a/config/lichess/Dockerfile
+++ b/config/lichess/Dockerfile
@@ -12,7 +12,7 @@
 
 # This Dockerfile expects the context to be the repo root
 
-FROM lichessbotdevs/lichess-bot:2026.5.12.2
+FROM lichessbotdevs/lichess-bot:2026.5.21.1
 
 ARG CMAKE_VERSION=4.2.3
 ARG CMAKE_PRESET=clang