diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 116439f..b1f13bf 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -60,11 +60,11 @@ jobs:
 
       - name: Dead code
         run: |
-          DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./...)
+          DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./...)
           if [ -n "$DEAD" ]; then echo "$DEAD"; exit 1; fi
 
       - name: Vulnerabilities
-        run: go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
 
       - name: Mocks up to date
         run: |
@@ -87,7 +87,7 @@ jobs:
       # length, complexity, magic numbers, global state and the panic policy.
       - uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.14
+          version: v2.15.0
           args: --config .golangci.yml
 
   frontend:
diff --git a/AGENTS.md b/AGENTS.md
index 4fb3bb8..76285f1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -18,8 +18,8 @@ Shipped as linux/darwin binaries and a multi-arch `scratch` image on ghcr.io.
 make check                                  # ./scripts/pre-commit.sh, check-only (no mockery)
 golangci-lint fmt --config .golangci.yml    # gofumpt + goimports (prefix github.com/dombyte/solis)
 golangci-lint run --config .golangci.yml
-go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./...
-go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
+go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./...
+go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
 go tool mockery                             # regenerate mocks (.mockery.yaml)
 go test -race ./...                         # as in CI
 make assets | build | all | docker          # dists; ./solis with ldflags; both; dev image
diff --git a/scripts/pre-commit.sh b/scripts/pre-commit.sh
index 6e0525d..2e0e05e 100755
--- a/scripts/pre-commit.sh
+++ b/scripts/pre-commit.sh
@@ -50,7 +50,7 @@ print_result $? "golangci-lint run"
 
 # 3. Unused exported code (golangci's unused only sees unexported identifiers)
 echo "Checking for dead code..."
-DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./... 2>&1)
+DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./... 2>&1)
 if [ -n "$DEAD" ]; then
     echo "$DEAD"
     print_result 1 "deadcode"
@@ -60,7 +60,7 @@ fi
 
 # 4. Known vulnerabilities in dependencies and the standard library
 echo "Checking for vulnerabilities..."
-go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
+go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
 print_result $? "govulncheck"
 
 # 5. Build