diff --git a/.cruft.json b/.cruft.json
index ab699e7..cc2a382 100644
--- a/.cruft.json
+++ b/.cruft.json
@@ -1,6 +1,6 @@
 {
   "template": "https://github.com/sunpy/package-template",
-  "commit": "35179454100c2f83118c49ac4a4a15e3c670365e",
+  "commit": "fce102b07567ef9fd7f808a87b2bd39f6579ecb0",
   "checkout": null,
   "context": {
     "cookiecutter": {
@@ -33,7 +33,7 @@
         ".github/workflows/sub_package_update.yml"
       ],
       "_template": "https://github.com/sunpy/package-template",
-      "_commit": "35179454100c2f83118c49ac4a4a15e3c670365e"
+      "_commit": "fce102b07567ef9fd7f808a87b2bd39f6579ecb0"
     }
   },
   "directory": null
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e8eb01e..b66a074 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,7 +5,7 @@ updates:
     schedule:
       interval: "monthly"
     cooldown:
-      default-days: 7
+      default-days: 14  # Most updates should be from the package template
     groups:
       actions:
         patterns:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 644f95e..1d3d813 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -48,7 +48,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
           persist-credentials: false
-      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
         with:
           python-version: '3.13'
       - run: python -m pip install -U --user build
@@ -139,4 +139,4 @@ jobs:
       - run: ls -lha dist/
 
       - name: Run upload
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2