diff --git a/.cruft.json b/.cruft.json
index c9eaeee..77b4725 100644
--- a/.cruft.json
+++ b/.cruft.json
@@ -1,6 +1,6 @@
 {
   "template": "https://github.com/sunpy/package-template",
-  "commit": "350cde4a1e8cf83b0944e133bd5797729dae14d1",
+  "commit": "85c6f46160cd6a98dc6f9b32067c0835f98a9c19",
   "checkout": null,
   "context": {
     "cookiecutter": {
@@ -36,7 +36,7 @@
         ".github/workflows/zizmor.yml"
       ],
       "_template": "https://github.com/sunpy/package-template",
-      "_commit": "350cde4a1e8cf83b0944e133bd5797729dae14d1"
+      "_commit": "85c6f46160cd6a98dc6f9b32067c0835f98a9c19"
     }
   },
   "directory": null
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 992171a..27674f3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,7 +31,8 @@ permissions: {}
 
 jobs:
   core:
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@22ddf09dfabb443adddfb9f861b7d41a787d6b1a  # v3.0.3
+    if: ${{ !github.event.repository.fork || github.event_name != 'schedule' }}
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14  # v3.1.0
     permissions:
       id-token: write
     with:
@@ -58,7 +59,7 @@ jobs:
 
   test:
     needs: [core, sdist_verify]
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@22ddf09dfabb443adddfb9f861b7d41a787d6b1a  # v3.0.3
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14  # v3.1.0
     permissions:
       id-token: write
     with:
@@ -75,7 +76,7 @@ jobs:
 
   docs:
     needs: [core]
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@22ddf09dfabb443adddfb9f861b7d41a787d6b1a  # v3.0.3
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14  # v3.1.0
     with:
       default_python: '3.13'
       submodules: false
@@ -110,7 +111,7 @@ jobs:
         contains(github.event.pull_request.labels.*.name, 'Run publish')
       )
     needs: [test, docs]
-    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@22ddf09dfabb443adddfb9f861b7d41a787d6b1a  # v3.0.3
+    uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@3a3dcf3ba6828dac29eba10334948ef38364ed14  # v3.1.0
     with:
       python-version: '3.13'
       test_extras: 'all,tests'
diff --git a/.github/workflows/label_sync.yml b/.github/workflows/label_sync.yml
index cc1d5fb..27a99ba 100644
--- a/.github/workflows/label_sync.yml
+++ b/.github/workflows/label_sync.yml
@@ -15,6 +15,7 @@ permissions:
 
 jobs:
   label_sync:
+    if: ${{ !github.event.repository.fork }}
     runs-on: ubuntu-latest
     name: Label Sync
     steps:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 3e61af9..a91ab9e 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -1,7 +1,7 @@
 repos:
     # This should be before any formatting hooks like isort
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.16.5"
+    rev: "v0.16.10"
     hooks:
       - id: ruff-check
         args: ["--fix", "--show-fixes"]