diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index e7c87021..4cf8a359 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -51,6 +51,7 @@ jobs:
       if: matrix.python-version == 3.7
       uses: codecov/codecov-action@v1
       with:
+        token: ${{ secrets.CODECOV_TOKEN }}
         file: ./coverage.xml
         name: codecov-umbrella
         fail_ci_if_error: true
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 2d5e2e38..eb508da9 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
 -   repo: https://github.com/psf/black
-    rev: 21.5b0
+    rev: 21.5b2
     hooks:
     -   id: black
 -   repo: https://github.com/pre-commit/mirrors-mypy
@@ -10,17 +10,17 @@ repos:
         files: src/cabinetry
         additional_dependencies: ["numpy>=1.20", "boost-histogram>=1.0.1"]
 -   repo: https://gitlab.com/pycqa/flake8
-    rev: 3.9.1
+    rev: 3.9.2
     hooks:
     -   id: flake8
         additional_dependencies: [flake8-bugbear, flake8-import-order, flake8-print]
 -   repo: https://github.com/asottile/pyupgrade
-    rev: v2.14.0
+    rev: v2.19.1
     hooks:
     -   id: pyupgrade
         args: ["--py37-plus"]
 -   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v3.4.0
+    rev: v4.0.1
     hooks:
     -   id: check-added-large-files
         args: ["--maxkb=100"]
diff --git a/setup.py b/setup.py
index d3d6e476..da17a762 100644
--- a/setup.py
+++ b/setup.py
@@ -14,7 +14,7 @@
             "flake8-import-order",
             "flake8-print",
             "mypy",
-            "typeguard!=2.11.*,!=2.12",  # NamedTuple incompatibility in Python 3.7
+            "typeguard!=2.11.*,!=2.12.*",  # NamedTuple incompatibility in Python 3.7
             "black",
         ]
     )