diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d2c8ed7..a0bb0f2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,13 +9,13 @@ jobs:
       - name: "Check out repository"
         uses: "actions/checkout@v4"
       - name: "Set up Python"
-        uses: "actions/setup-python@v4"
+        uses: "actions/setup-python@v5"
         with:
           python-version: "3.9"
       - name: "Build distribution packages"
         run: make package-check
       - name: "Save distribution directory"
-        uses: "actions/upload-artifact@v3"
+        uses: "actions/upload-artifact@v4"
         with:
           name: "distribution"
           path: |
@@ -29,7 +29,7 @@ jobs:
       id-token: "write"
     steps:
       - name: "Restore distribution directory"
-        uses: "actions/download-artifact@v3"
+        uses: "actions/download-artifact@v4"
         with:
           name: "distribution"
           path: |
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a2da994..7122f7e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -39,11 +39,13 @@ jobs:
           tox -- --cov metsrw --cov-report xml:coverage.xml
       - name: "Upload coverage report"
         if: github.repository == 'artefactual-labs/mets-reader-writer'
-        uses: "codecov/codecov-action@v3"
+        uses: "codecov/codecov-action@v4"
         with:
           files: ./coverage.xml
           fail_ci_if_error: false
           verbose: true
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   lint:
     name: "Lint"
     runs-on: "ubuntu-22.04"
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index f2a0c47..3c59e5f 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
 - repo: https://github.com/asottile/pyupgrade
-  rev: v3.15.0
+  rev: v3.15.2
   hooks:
   - id: pyupgrade
     args: [--py38-plus]
@@ -19,9 +19,9 @@ repos:
   hooks:
   - id: flake8
     additional_dependencies:
-    - flake8-bugbear==23.12.2
+    - flake8-bugbear==24.2.6
     - flake8-comprehensions==3.14.0
 - repo: https://github.com/igorshubovych/markdownlint-cli
-  rev: v0.38.0
+  rev: v0.39.0
   hooks:
   - id: markdownlint
diff --git a/requirements-dev.txt b/requirements-dev.txt
index d6be59c..8f8984f 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -10,15 +10,15 @@ alabaster==0.7.13
     #   sphinx
 babel==2.14.0
     # via sphinx
-build==1.0.3
+build==1.2.1
     # via pip-tools
-certifi==2023.11.17
+certifi==2024.2.2
     # via requests
 charset-normalizer==3.3.2
     # via requests
 click==8.1.7
     # via pip-tools
-coverage[toml]==7.4.0
+coverage[toml]==7.4.4
     # via
     #   metsrw (pyproject.toml)
     #   pytest-cov
@@ -28,11 +28,11 @@ docutils==0.20.1
     #   sphinx-rtd-theme
 exceptiongroup==1.2.0
     # via pytest
-idna==3.6
+idna==3.7
     # via requests
 imagesize==1.4.1
     # via sphinx
-importlib-metadata==7.0.1
+importlib-metadata==7.1.0
     # via
     #   build
     #   sphinx
@@ -40,28 +40,30 @@ iniconfig==2.0.0
     # via pytest
 jinja2==3.1.3
     # via sphinx
-lxml==5.1.0
+lxml==5.2.1
     # via metsrw (pyproject.toml)
-markupsafe==2.1.4
+markupsafe==2.1.5
     # via jinja2
-packaging==23.2
+packaging==24.0
     # via
     #   build
     #   pytest
     #   sphinx
-pip-tools==7.3.0
+pip-tools==7.4.1
     # via metsrw (pyproject.toml)
-pluggy==1.3.0
+pluggy==1.4.0
     # via pytest
 pygments==2.17.2
     # via sphinx
 pyproject-hooks==1.0.0
-    # via build
-pytest==7.4.4
+    # via
+    #   build
+    #   pip-tools
+pytest==8.1.1
     # via
     #   metsrw (pyproject.toml)
     #   pytest-cov
-pytest-cov==4.1.0
+pytest-cov==5.0.0
     # via metsrw (pyproject.toml)
 requests==2.31.0
     # via sphinx
@@ -105,15 +107,15 @@ tomli==2.0.1
     #   pip-tools
     #   pyproject-hooks
     #   pytest
-urllib3==2.1.0
+urllib3==2.2.1
     # via requests
-wheel==0.42.0
+wheel==0.43.0
     # via pip-tools
-zipp==3.17.0
+zipp==3.18.1
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
-pip==23.3.2
+pip==24.0
     # via pip-tools
-setuptools==69.0.3
+setuptools==69.2.0
     # via pip-tools
diff --git a/requirements.txt b/requirements.txt
index e9c661c..1a315b4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4,5 +4,5 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements.txt pyproject.toml
 #
-lxml==5.1.0
+lxml==5.2.1
     # via metsrw (pyproject.toml)