diff --git a/spiffe-tls/poetry.lock b/spiffe-tls/poetry.lock
index 830cdb1e..d123cea1 100644
--- a/spiffe-tls/poetry.lock
+++ b/spiffe-tls/poetry.lock
@@ -517,13 +517,13 @@ testing = ["pytest", "pytest-benchmark"]
 
 [[package]]
 name = "pre-commit"
-version = "3.8.0"
+version = "4.0.1"
 description = "A framework for managing and maintaining multi-language pre-commit hooks."
 optional = false
 python-versions = ">=3.9"
 files = [
-    {file = "pre_commit-3.8.0-py2.py3-none-any.whl", hash = "sha256:9a90a53bf82fdd8778d58085faf8d83df56e40dfe18f45b19446e26bf1b3a63f"},
-    {file = "pre_commit-3.8.0.tar.gz", hash = "sha256:8bb6494d4a20423842e198980c9ecf9f96607a07ea29549e180eef9ae80fe7af"},
+    {file = "pre_commit-4.0.1-py2.py3-none-any.whl", hash = "sha256:efde913840816312445dc98787724647c65473daefe420785f885e8ed9a06878"},
+    {file = "pre_commit-4.0.1.tar.gz", hash = "sha256:80905ac375958c0444c65e9cebebd948b3cdb518f335a091a670a89d652139d2"},
 ]
 
 [package.dependencies]
@@ -892,4 +892,4 @@ test = ["covdefaults (>=2.3)", "coverage (>=7.2.7)", "coverage-enable-subprocess
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.9"
-content-hash = "994ee6252dfa0cd5613c6fcf053098fb650cf980a7996306a4cbbcfe89c2c05e"
+content-hash = "9d6cf7ed579d282662055ecdd263f256c5fe3c1cd3eaf60acd151a99009a1868"
diff --git a/spiffe-tls/pyproject.toml b/spiffe-tls/pyproject.toml
index 57c71ae8..e4166c9b 100644
--- a/spiffe-tls/pyproject.toml
+++ b/spiffe-tls/pyproject.toml
@@ -23,7 +23,7 @@ mypy-protobuf = "^3.6"
 types-pyOpenSSL = "^24.1"
 pytest = "^8.3"
 pytest-mock = "^3.14"
-pre-commit = "^3.8"
+pre-commit = "^4.0"
 flake8 = "^7.1"
 testutils = { path = "../testutils" }