diff --git a/.trunk/.gitignore b/.trunk/.gitignore
index 1e246529..15966d08 100644
--- a/.trunk/.gitignore
+++ b/.trunk/.gitignore
@@ -6,3 +6,4 @@
 plugins
 user_trunk.yaml
 user.yaml
+tmp
diff --git a/.trunk/trunk.yaml b/.trunk/trunk.yaml
index 86a70d55..4186a1e2 100644
--- a/.trunk/trunk.yaml
+++ b/.trunk/trunk.yaml
@@ -2,12 +2,12 @@
 # To learn more about the format of this file, see https://docs.trunk.io/reference/trunk-yaml
 version: 0.1
 cli:
-  version: 1.18.0
+  version: 1.20.1
 # Trunk provides extensibility via plugins. (https://docs.trunk.io/plugins)
 plugins:
   sources:
     - id: trunk
-      ref: v1.3.0
+      ref: v1.4.3
       uri: https://github.com/trunk-io/plugins
 # Many linters and tools depend on runtimes - configure them here. (https://docs.trunk.io/runtimes)
 runtimes:
@@ -18,20 +18,26 @@ runtimes:
 # This is the section where you manage your linters. (https://docs.trunk.io/check/configuration)
 # - osv-scanner@1.5.0  # too sensitive, causing failures that make devs skip checks.
 lint:
+  disabled:
+    - black
   enabled:
+    # - black@24.2.0
+    # - osv-scanner@1.6.2
+    - trufflehog@3.67.7
     - yapf@0.40.2
+    - isort@5.13.2
     - actionlint@1.6.26
-    - bandit@1.7.5
-    - checkov@3.1.9
+    - bandit@1.7.7
+    - checkov@3.2.22
     - git-diff-check
-    - markdownlint@0.37.0
+    - markdownlint@0.39.0
     - oxipng@9.0.0
-    - prettier@3.1.0
-    - ruff@0.1.7
+    - prettier@3.2.5
+    - ruff@0.2.2
     - shellcheck@0.9.0
     - shfmt@3.6.0
-    - trivy@0.48.0
-    - yamllint@1.33.0
+    - trivy@0.49.1
+    - yamllint@1.35.1
   ignore:
     - linters: [ALL]
       paths: