diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 09532b3d7..b8fd91db6 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -56,7 +56,7 @@ repos:
           )
       - id: mixed-line-ending
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.7
+    rev: v0.14.8
     hooks:
       - id: ruff-format
       - id: ruff
diff --git a/deny.toml b/deny.toml
index 734700059..a1f3d6213 100644
--- a/deny.toml
+++ b/deny.toml
@@ -81,6 +81,8 @@ ignore = [
     "RUSTSEC-2024-0436",
     # num_prefix unmaintained
     "RUSTSEC-2025-0119",
+    # rustls-pemfile unmaintained
+    "RUSTSEC-2025-0134",
     #{ id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
     #"a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish
     #{ crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },