diff --git a/.github/dev-tools/package.json b/.github/dev-tools/package.json
index 90aa6cb..e18910d 100644
--- a/.github/dev-tools/package.json
+++ b/.github/dev-tools/package.json
@@ -4,7 +4,7 @@
   "devDependencies": {
     "@earendil-works/pi-coding-agent": "0.85.1",
     "@openai/codex": "0.154.0",
-    "@steipete/oracle": "0.20.0",
+    "@steipete/oracle": "0.20.2",
     "typescript": "6.0.3",
     "typescript-language-server": "6.0.0"
   }
diff --git a/.github/dev-tools/requirements.txt b/.github/dev-tools/requirements.txt
index c0ef0bb..5cd7b74 100644
--- a/.github/dev-tools/requirements.txt
+++ b/.github/dev-tools/requirements.txt
@@ -1 +1 @@
-pyright==1.1.411
+pyright==1.1.414
diff --git a/.github/workflows/validate-zsh-plugins.yml b/.github/workflows/validate-zsh-plugins.yml
index 9f4d29a..28c19ab 100644
--- a/.github/workflows/validate-zsh-plugins.yml
+++ b/.github/workflows/validate-zsh-plugins.yml
@@ -22,7 +22,7 @@ jobs:
     timeout-minutes: 15
     env:
       # renovate: datasource=github-releases depName=twpayne/chezmoi
-      CHEZMOI_VERSION: v2.72.1
+      CHEZMOI_VERSION: v2.72.2
     steps:
       - name: Check out repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1