diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 0000000..665ae51
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1 @@
+tidelift: "pypi/pyproject-fmt"
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 0000000..6672d10
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 0.12 +  | :white_check_mark: |
+| < 0.12  | :x:                |
+
+## Reporting a Vulnerability
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift
+will coordinate the fix and disclosure.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6fe4906..97661a6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -24,4 +24,4 @@ jobs:
       - name: Build package
         run: pyproject-build -s -w . -o dist
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@v1.8.7
+        uses: pypa/gh-action-pypi-publish@v1.8.10
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ac318b2..60bf662 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -5,7 +5,7 @@ repos:
       - id: end-of-file-fixer
       - id: trailing-whitespace
   - repo: https://github.com/psf/black
-    rev: 23.3.0
+    rev: 23.7.0
     hooks:
       - id: black
   - repo: https://github.com/tox-dev/tox-ini-fmt
@@ -14,17 +14,17 @@ repos:
       - id: tox-ini-fmt
         args: ["-p", "fix"]
   - repo: https://github.com/tox-dev/pyproject-fmt
-    rev: "0.12.1"
+    rev: "0.13.0"
     hooks:
       - id: pyproject-fmt
-        additional_dependencies: ["tox>=4.6"]
+        additional_dependencies: ["tox>=4.6.4"]
   - repo: https://github.com/pre-commit/mirrors-prettier
-    rev: "v3.0.0-alpha.9-for-vscode"
+    rev: "v3.0.1"
     hooks:
       - id: prettier
         args: ["--print-width=120", "--prose-wrap=always"]
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.0.275"
+    rev: "v0.0.282"
     hooks:
       - id: ruff
         args: [--fix, --exit-non-zero-on-fix]
diff --git a/pyproject.toml b/pyproject.toml
index 81f560d..5b11def 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -32,23 +32,23 @@ dynamic = [
   "version",
 ]
 dependencies = [
-  "natsort>=8.3.1",
+  "natsort>=8.4",
   "packaging>=23.1",
   "tomlkit>=0.11.8",
-  'typing-extensions>=4.6.3; python_version < "3.8"',
+  'typing-extensions>=4.7.1; python_version < "3.8"',
 ]
 optional-dependencies.docs = [
   "furo>=2023.5.20",
   "sphinx>=7.0.1",
-  "sphinx-argparse-cli>=1.11",
-  "sphinx-autodoc-typehints!=1.23.4,>=1.23.1",
+  "sphinx-argparse-cli>=1.11.1",
+  "sphinx-autodoc-typehints!=1.23.4,>=1.23.3",
   "sphinx-copybutton>=0.5.2",
 ]
 optional-dependencies.test = [
   "covdefaults>=2.3",
-  "pytest>=7.3.2",
+  "pytest>=7.4",
   "pytest-cov>=4.1",
-  "pytest-mock>=3.10",
+  "pytest-mock>=3.11.1",
 ]
 urls."Bug Tracker" = "https://github.com/tox-dev/pyproject-fmt/issues"
 urls."Changelog" = "https://github.com/tox-dev/pyproject-fmt/releases"
@@ -59,7 +59,7 @@ scripts.pyproject-fmt = "pyproject_fmt.__main__:run"
 [tool.hatch]
 build.dev-mode-dirs = ["src"]
 build.hooks.vcs.version-file = "src/pyproject_fmt/_version.py"
-build.targets.sdist.include = ["/src", "/tests"]
+build.targets.sdist.include = ["/src", "/tests","tox.ini"]
 version.source = "vcs"
 
 [tool.ruff]
diff --git a/src/pyproject_fmt/formatter/util.py b/src/pyproject_fmt/formatter/util.py
index 9e639e6..6c80505 100644
--- a/src/pyproject_fmt/formatter/util.py
+++ b/src/pyproject_fmt/formatter/util.py
@@ -132,7 +132,7 @@ def sorted_array(
     body.clear()
     indent_text = " " * indent
     for start_entry in start:
-        body.append(
+        body.append(  # noqa: PERF401
             _ArrayItemGroup(indent=Whitespace(f"\n{indent_text}"), comment=start_entry),
         )
 
diff --git a/tox.ini b/tox.ini
index f4b8e3a..7134776 100644
--- a/tox.ini
+++ b/tox.ini
@@ -44,7 +44,7 @@ commands =
 [testenv:type]
 description = run type check on code base
 deps =
-    mypy==1.3
+    mypy==1.4.1
 set_env =
     {tty:MYPY_FORCE_COLOR = 1}
 commands =