diff --git a/.github/workflows/check-lint.yml b/.github/workflows/check-lint.yml
index e8d6c3b93..fa83f5e19 100644
--- a/.github/workflows/check-lint.yml
+++ b/.github/workflows/check-lint.yml
@@ -162,4 +162,4 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
-      - uses: crate-ci/typos@06d010dfe4c84fdab1a25ea02b57b3585018ba80 # v1.42.3
+      - uses: crate-ci/typos@78bc6fb2c0d734235d57a2d6b9de923cc325ebdd # v1.43.4
diff --git a/_typos.toml b/_typos.toml
index b7b51e6aa..b0e9b90f8 100644
--- a/_typos.toml
+++ b/_typos.toml
@@ -21,3 +21,8 @@ extend-ignore-re = [
 
 [default.extend-identifiers]
 seeked = "seeked" # special term used for streams
+CPY_VERSION_RE = "CPY_VERSION_RE" # CPython version regex
+
+[default.extend-words]
+certifi = "certifi" # Python package name
+Iz = "Iz" # appears in base64-encoded hashes