diff --git a/.githooks/pre-push b/.githooks/pre-push
index e32bd02..660d2a1 100755
--- a/.githooks/pre-push
+++ b/.githooks/pre-push
@@ -1,4 +1,19 @@
 #!/bin/sh
+
+#   Copyright The containerd Authors.
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+
+#       http://www.apache.org/licenses/LICENSE-2.0
+
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+
 # Pre-push hook: when pushing a tag, verify that the Version const in
 # version.go matches the tag being pushed.
 #
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 1ddf0eb..abffd9d 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -56,6 +56,6 @@ jobs:
           go-version: "1.26.x"
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6.1.1
+        uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
         with:
-          version: v2.1.6
+          version: v2.12.2
diff --git a/Makefile b/Makefile
index 60d8dba..1bca9f4 100644
--- a/Makefile
+++ b/Makefile
@@ -1,3 +1,17 @@
+#   Copyright The containerd Authors.
+
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+
+#       http://www.apache.org/licenses/LICENSE-2.0
+
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+
 GO ?= go
 GO_BUILDTAGS ?=
 # On Windows the test binary must have the .exe extension to be executable.