diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index ee9589a3..cf4659fd 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,6 +6,8 @@ jobs:
   build:
     if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v4
@@ -16,8 +18,12 @@ jobs:
       - id: changed-files
         uses: tj-actions/changed-files@v39
       - uses: pre-commit/action@v3.0.0
+        continue-on-error: true
         with:
           extra_args: pip-compile --files ${{ steps.changed-files.outputs.all_changed_files }}
+      - uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: '[github-actions] pre-commit autoupdate'
       - shell: bash
         run: curl -s -S --retry 3 $BASEDIR/tests/install.sh | bash -
       - shell: bash
diff --git a/requirements.txt b/requirements.txt
index 545728c7..3950bfa1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -48,8 +48,6 @@ django-environ==0.4.5
     # via libcoveweb
 et-xmlfile==1.1.0
     # via openpyxl
-exceptiongroup==1.1.2
-    # via cattrs
 flattentool==0.19.0
     # via
     #   libcove
@@ -150,11 +148,9 @@ sqlparse==0.4.4
     # via django
 transaction==3.0.1
     # via zodb
-typing-extensions==4.7.1
-    # via cattrs
 url-normalize==1.4.3
     # via requests-cache
-urllib3==2.0.6
+urllib3==2.0.7
     # via
     #   requests
     #   requests-cache
diff --git a/requirements_dev.txt b/requirements_dev.txt
index e14fe3f6..8347a42f 100644
--- a/requirements_dev.txt
+++ b/requirements_dev.txt
@@ -92,13 +92,7 @@ et-xmlfile==1.1.0
     #   -r requirements.txt
     #   openpyxl
 exceptiongroup==1.1.2
-    # via
-    #   -r requirements.txt
-    #   cattrs
-    #   hypothesis
-    #   pytest
-    #   trio
-    #   trio-websocket
+    # via trio-websocket
 flake8==3.9.2
     # via -r requirements_dev.in
 flattentool==0.19.0
@@ -298,11 +292,6 @@ sqlparse==0.4.4
     #   django
 toml==0.10.2
     # via coverage
-tomli==2.0.1
-    # via
-    #   build
-    #   pyproject-hooks
-    #   pytest
 transaction==3.0.1
     # via
     #   -r requirements.txt
@@ -313,15 +302,11 @@ trio==0.22.0
     #   trio-websocket
 trio-websocket==0.10.2
     # via selenium
-typing-extensions==4.7.1
-    # via
-    #   -r requirements.txt
-    #   cattrs
 url-normalize==1.4.3
     # via
     #   -r requirements.txt
     #   requests-cache
-urllib3[socks]==2.0.6
+urllib3[socks]==2.0.7
     # via
     #   -r requirements.txt
     #   requests