diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6487cf0821..eb938f1bf4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -41,7 +41,7 @@ repos:
         args: ['--explicit-package-bases']
         exclude: '^(third_party/)|(cereal/)|(opendbc/)|(panda/)|(laika/)|(laika_repo/)|(rednose/)|(rednose_repo/)|(tinygrad/)|(tinygrad_repo/)|(xx/)'
 -   repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.0.292
+    rev: v0.1.0
     hooks:
     -   id: ruff
         exclude: '^(third_party/)|(cereal/)|(rednose/)|(panda/)|(laika/)|(laika_repo/)|(rednose_repo/)|(tinygrad/)|(tinygrad_repo/)'
diff --git a/poetry.lock b/poetry.lock
index aa81bcb125..0b3b7cee43 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:3e9b9bda9871d24ea24eda2b30078ad87b20eb57e00296c0170bb6aa6df10510
-size 454526
+oid sha256:d033a318c61874aa3a228cef58720bb818476a2d69f0270b5fcd7123a6829a8b
+size 455011
diff --git a/pyproject.toml b/pyproject.toml
index d61a45c9d0..b87211cc92 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -162,7 +162,9 @@ types-pycurl = "*"
 types-PyYAML = "*"
 types-requests = "*"
 types-tabulate = "*"
-pyqt5 = { version = "*", markers = "platform_machine == 'x86_64'" } # no aarch64 wheels for macOS/linux
+
+# this is only pinned since 5.15.11 is broken
+pyqt5 = { version = "==5.15.2", markers = "platform_machine == 'x86_64'" } # no aarch64 wheels for macOS/linux
 
 [tool.poetry.group.carla]
 optional = true
diff --git a/tools/install_python_dependencies.sh b/tools/install_python_dependencies.sh
index 07bb8ac9a4..6753afffb9 100755
--- a/tools/install_python_dependencies.sh
+++ b/tools/install_python_dependencies.sh
@@ -54,8 +54,8 @@ fi
 eval "$(pyenv init --path)"
 
 echo "update pip"
-pip install pip==23.2.1
-pip install poetry==1.5.1
+pip install pip==23.3
+pip install poetry==1.6.1
 
 poetry config virtualenvs.prefer-active-python true --local
 poetry config virtualenvs.in-project true --local