diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 31ff75f..8296f52 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -41,10 +41,15 @@ jobs:
       pull-requests: read
     with:
       dry-run: true
+  hooks:
+    name: 🧹 Hooks under the cooldown
+    uses: tox-dev/github-workflows/.github/workflows/cooled-hooks.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
+    permissions:
+      contents: read
   gate:
     name: 🚦 Required checks pass
     if: ${{ !cancelled() }} # codespell:ignore cancelled
-    needs: [test, release]
+    needs: [test, release, hooks]
     runs-on: ubuntu-26.04
     permissions: {}
     steps:
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 344eb9a..f359fc4 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -24,7 +24,7 @@ permissions:
 jobs:
   prepare:
     name: 🏷️ Prepare Towncrier release
-    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@8ad4e0493bb389ee6f3576916c9fdaa17d607477 # 6.6.1
+    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
     with:
       bump: ${{ inputs.bump || 'auto' }}
       dry-run: ${{ inputs.dry-run == true }}