diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 6bb7ab5..2f360ee 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -60,11 +60,11 @@ jobs:
 
       - name: Dead code
         run: |
-          DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./...)
+          DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./...)
           if [ -n "$DEAD" ]; then echo "$DEAD"; exit 1; fi
 
       - name: Vulnerabilities
-        run: go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
 
       - name: Mocks up to date
         run: |
diff --git a/AGENTS.md b/AGENTS.md
index 82bda69..437b78d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -72,8 +72,8 @@ restor orchestrates **restic** backups of several **projects** on one host.
 make check                                                # ./scripts/pre-commit.sh, check-only
 golangci-lint fmt --config .golangci.yml                  # gofumpt + goimports
 golangci-lint run --config .golangci.yml                  # full linter set (section 12)
-go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./... # unused exported code
-go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...     # known vulnerabilities
+go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./... # unused exported code
+go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...     # known vulnerabilities
 go test -race ./...                                       # all unit tests, as in CI
 go tool mockery                                           # regenerate mocks (.mockery.yaml)
 make build                                                # ./restor with version info (ldflags)
diff --git a/scripts/pre-commit.sh b/scripts/pre-commit.sh
index 1f83554..a70a51d 100755
--- a/scripts/pre-commit.sh
+++ b/scripts/pre-commit.sh
@@ -58,7 +58,7 @@ print_result $? "golangci-lint run"
 
 # 3. Unused exported code (golangci's unused only sees unexported identifiers)
 echo "Checking for dead code..."
-DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.51.0 -test ./... 2>&1)
+DEAD=$(go run golang.org/x/tools/cmd/deadcode@v0.52.0 -test ./... 2>&1)
 if [ -n "$DEAD" ]; then
     echo "$DEAD"
     print_result 1 "deadcode"
@@ -68,7 +68,7 @@ fi
 
 # 4. Known vulnerabilities in dependencies and the standard library
 echo "Checking for vulnerabilities..."
-go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
+go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./...
 print_result $? "govulncheck"
 
 # 5. Build