diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..912f465f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+version: 2
+updates:
+
+  # Maintain dependencies for GitHub Actions (main)
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    target-branch: "main"
+    schedule:
+      interval: "weekly"
+
+  # Maintain dependencies for pip (main)
+  - package-ecosystem: "pip"
+    directory: "/"
+    target-branch: "main"
+    schedule:
+      interval: "weekly"
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 3fd356ef..7b8b11ab 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           submodules: true
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4e12532d..f4975abd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -15,7 +15,14 @@ on:
   pull_request:
 
 jobs:
+  pre-commit:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v4
+    - uses: pre-commit/action@v3.0.0
   core:
+    needs: [pre-commit]
     uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1
     with:
       submodules: false
@@ -23,6 +30,7 @@ jobs:
         - linux: py39
         - linux: py310
         - linux: py311
+        - linux: py312
 
   test:
     needs: [core]
@@ -43,22 +51,23 @@ jobs:
       upload_to_anaconda: false
 
   asdf-dev:
+    needs: [pre-commit]
     name: Run asdf-development tests
     runs-on: ubuntu-latest
     steps:
       - name: Checkout asdf-standard
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           path: asdf-standard
       - name: Checkout asdf-dev
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           repository: asdf-format/asdf
           path: asdf
       - name: Set up Python 3.9
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: 3.9
       - name: Install asdf-standard
diff --git a/.github/workflows/downstream.yml b/.github/workflows/downstream.yml
index 5867e4a5..c9778997 100644
--- a/.github/workflows/downstream.yml
+++ b/.github/workflows/downstream.yml
@@ -86,19 +86,19 @@ jobs:
             test_command: pytest
     steps:
       - name: Checkout asdf-standard
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           submodules: true
           path: asdf-standard
       - name: Checkout ${{ matrix.package_name }}
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           repository: ${{ matrix.repository }}
           path: target
       - name: Set up Python 3.9
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: 3.9
       - name: Install asdf-standard