diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 9308cba..7b1264c 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -71,10 +71,15 @@ jobs:
       pull-requests: read
     with:
       dry-run: true
+  hooks:
+    name: 🧹 Hooks under the cooldown
+    uses: tox-dev/github-workflows/.github/workflows/cooled-hooks.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
+    permissions:
+      contents: read
   gate:
     name: 🚦 ${{ github.event_name == 'pull_request' && 'Required checks pass' || 'Non-PR checks pass' }}
     if: ${{ !cancelled() }} # codespell:ignore cancelled
-    needs: [test, old-target, release]
+    needs: [test, old-target, release, hooks]
     runs-on: ubuntu-26.04
     permissions: {}
     steps:
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 0935947..4defe63 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -18,7 +18,7 @@ permissions: {}
 jobs:
   prepare:
     name: 🏷️ Prepare Towncrier release
-    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@8ad4e0493bb389ee6f3576916c9fdaa17d607477 # 6.6.1
+    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
     permissions:
       contents: read
       pull-requests: read