Skip to content

build(deps): bump the pre-commit group with 5 updates - #790

Merged
flying-sheep merged 3 commits into
mainfrom
dependabot/pre_commit/pre-commit-caca4dc67a
Nov 12, 2026
Merged

flying-sheep merged 3 commits into
mainfrom
dependabot/pre_commit/pre-commit-caca4dc67a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the pre-commit group with 5 updates:

Package From To
https://github.com/biomejs/pre-commit v2.5.3 2.6.5
https://github.com/tox-dev/pyproject-fmt v2.25.3 2.30.6
https://github.com/astral-sh/ruff-pre-commit v0.15.21 0.17.3
https://github.com/zizmorcore/zizmor-pre-commit v1.24.1 1.32.0
https://github.com/pre-commit/mirrors-mypy v1.20.2 2.4.1

Updates https://github.com/biomejs/pre-commit from v2.5.3 to 2.6.5

Commits
  • ad326a0 build(deps): bump @​biomejs/biome to 2.6.5
  • f5aab44 build(deps): bump @​biomejs/biome to 2.6.4 (#136)
  • eb45ebf build(deps): bump @​biomejs/biome to 2.6.4
  • 9a227f8 build(deps): bump @​biomejs/biome to 2.6.3 (#135)
  • f9fccc9 build(deps): bump @​biomejs/biome to 2.6.3
  • 940b640 feat: support markdown and yaml files by default (#134)
  • c5c4e2d feat: support markdown and yaml files by default
  • 68410eb build(deps): bump @​biomejs/biome to 2.6.2 (#133)
  • f323c67 chore(deps): update actions/checkout action to v7 (#114)
  • 09d0793 chore(deps): update actions/setup-node action to v7 (#119)
  • Additional commits viewable in compare view

Updates https://github.com/tox-dev/pyproject-fmt from v2.25.3 to 2.30.6

Release notes

Sourced from https://github.com/tox-dev/pyproject-fmt's releases.

v2.30.6

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.30.3...v2.30.6

v2.30.3

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.30.2...v2.30.3

v2.30.2

Full Changelog: tox-dev/pyproject-fmt@v2.30.1...v2.30.2

v2.30.1

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.30.0...v2.30.1

v2.30.0

Full Changelog: tox-dev/pyproject-fmt@v2.29.4...v2.30.0

v2.29.4

... (truncated)

Commits
  • 3c6e76e Mirror: 2.30.6
  • e75976f 👷 ci: run nightly checks in the overnight window (#378)
  • 4cf2143 👷 ci: pin github-workflows to 6.5.2 (#377)
  • 543c80d 👷 ci: shared workflows and dependency hygiene (#376)
  • 3d3f39a build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.2 in the github-acti...
  • 5a57a7e 🐛 fix(scorecard): pin merged workflow (#374)
  • a0e62b9 👷 ci(scorecard): publish OpenSSF results (#373)
  • 83f80ce [pre-commit.ci] pre-commit autoupdate (#372)
  • d02a68e build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 in the github-acti...
  • e83ed85 [pre-commit.ci] pre-commit autoupdate (#370)
  • Additional commits viewable in compare view

Updates https://github.com/astral-sh/ruff-pre-commit from v0.15.21 to 0.17.3

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.17.3

See: https://github.com/astral-sh/ruff/releases/tag/0.17.3

v0.17.2

See: https://github.com/astral-sh/ruff/releases/tag/0.17.2

v0.17.1

See: https://github.com/astral-sh/ruff/releases/tag/0.17.1

v0.17.0

See: https://github.com/astral-sh/ruff/releases/tag/0.17.0

v0.16.10

See: https://github.com/astral-sh/ruff/releases/tag/0.16.10

v0.16.9

See: https://github.com/astral-sh/ruff/releases/tag/0.16.9

v0.16.8

See: https://github.com/astral-sh/ruff/releases/tag/0.16.8

v0.16.7

See: https://github.com/astral-sh/ruff/releases/tag/0.16.7

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

v0.16.5

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

v0.16.4

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

v0.16.1

See: https://github.com/astral-sh/ruff/releases/tag/0.16.1

v0.16.0

See: https://github.com/astral-sh/ruff/releases/tag/0.16.0

v0.15.22

See: https://github.com/astral-sh/ruff/releases/tag/0.15.22

Commits
  • 25bcf95 Mirror: 0.17.3
  • f368fb3 Mirror: 0.17.2
  • 65a0c46 Use patched certifi bundle for release mirroring (#189)
  • 0919ea4 Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 in the github-actions group (#188)
  • 38bfb07 Mirror: 0.17.1
  • 44b5042 Mirror: 0.17.0
  • e2053c9 Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-actions group (#184)
  • f12be1e Mirror: 0.16.10
  • 6089d41 Document adding quarto to types_or for Quarto code fence formatting (#183)
  • a56c0b9 Mirror: 0.16.9
  • Additional commits viewable in compare view

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.24.1 to 1.32.0

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.32.0

Sponsorship is appreciated!

New Features 🌈🔗

  • zizmor now has experimental support for GitHub Actions workflow lockfiles. Please see the limitations documentation for more information about the current implementation and its limitations (#2463)

Enhancements 🌱🔗

  • zizmor's input collection is now "root-aware" by default, meaning that invocations like zizmor . will no longer collect inputs unless they would actually be used by GitHub Actions, etc. This should eliminate spurious findings from (e.g.) workflow definitions in vendored directories. See the input collection documentation for more information. (#2454)

  • zizmor's LSP now honors the didChangeWorkspaceFolders event (#2461)

  • zizmor's LSP now audits pre-commit inputs (#2485)

  • zizmor now provides Windows ARM64 wheels on PyPI (#2424)

    Many thanks to @​ndabas for proposing and implementing this improvement!

Bug Fixes 🐛🔗

  • Fixed a bug where the bot-conditions audit did not properly flag if: condition of jobs that call a reusable workflow (#2457)

  • Fixed a bug where the obfuscation audit would incorrectly flag (and suggest an incorrect auto-fix for) expressions that constant-reduce to other expressions (#2483)

  • Fixed a bug where the template-injection audit did not flag attacker-controllable contexts wrapped in fromJSON(...), such as fromJSON(toJSON(github.event.issue.title)) (#2495)

  • Fixed a bug where the template-injection audit did not flag attacker-controllable contexts in the values of case(...), such as case(cond, github.event.issue.title, 'x') (#2504)

  • Fixed a class of bugs in the obfuscation audit where a constant-reducible subexpression would not be replaced with a contextually correct form (#2483)

  • Fixed a bug where zizmor would incorrectly audit pre-commit inputs that ended with .yml, despite pre-commit requiring the .yaml suffix (#2485)

  • Fixed a bug where zizmor would not honor some ignore comments for the stale-action-refs audit (#2494)

  • Fixed a bug where zizmor would not honor some ignore comments for the ref-version-mismatch audit (#2494)

v1.31.1

Sponsorship is appreciated!

Bug Fixes 🐛🔗

v1.31.0

Sponsorship is appreciated!

Enhancements 🌱🔗

... (truncated)

Commits
  • 06a3975 Mirror: 1.32.0
  • c92afdf Mirror: 1.31.1
  • d25b2b1 Mirror: 1.31.0
  • 04df6d7 chore: drop Python 3.10 support (EOL) (#65)
  • fe0957c Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-actions group (#64)
  • de807da Bump the github-actions group with 2 updates (#63)
  • fa41207 Mirror: 1.30.1
  • 7361a0b fix: include pre-commit files in hook (#59)
  • 34c5ce3 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the github-actions group...
  • cef8b83 Mirror: 1.30.0
  • Additional commits viewable in compare view

Updates https://github.com/pre-commit/mirrors-mypy from v1.20.2 to 2.4.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pre-commit group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [https://github.com/biomejs/pre-commit](https://github.com/biomejs/pre-commit) | `v2.5.3` | `2.6.5` |
| [https://github.com/tox-dev/pyproject-fmt](https://github.com/tox-dev/pyproject-fmt) | `v2.25.3` | `2.30.6` |
| [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) | `v0.15.21` | `0.17.3` |
| [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit) | `v1.24.1` | `1.32.0` |
| [https://github.com/pre-commit/mirrors-mypy](https://github.com/pre-commit/mirrors-mypy) | `v1.20.2` | `2.4.1` |


Updates `https://github.com/biomejs/pre-commit` from v2.5.3 to 2.6.5
- [Release notes](https://github.com/biomejs/pre-commit/releases)
- [Commits](biomejs/pre-commit@v2.5.3...v2.6.5)

Updates `https://github.com/tox-dev/pyproject-fmt` from v2.25.3 to 2.30.6
- [Release notes](https://github.com/tox-dev/pyproject-fmt/releases)
- [Commits](tox-dev/pyproject-fmt@v2.25.3...v2.30.6)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.15.21 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.15.21...v0.17.3)

Updates `https://github.com/zizmorcore/zizmor-pre-commit` from v1.24.1 to 1.32.0
- [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.24.1...v1.32.0)

Updates `https://github.com/pre-commit/mirrors-mypy` from v1.20.2 to 2.4.1
- [Commits](pre-commit/mirrors-mypy@v1.20.2...v2.4.1)

---
updated-dependencies:
- dependency-name: https://github.com/biomejs/pre-commit
  dependency-version: 2.6.5
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/tox-dev/pyproject-fmt
  dependency-version: 2.30.6
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.17.3
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/zizmorcore/zizmor-pre-commit
  dependency-version: 1.32.0
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/pre-commit/mirrors-mypy
  dependency-version: 2.4.1
  dependency-type: direct:production
  dependency-group: pre-commit
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Nov 12, 2026
@codecov-commenter

codecov-commenter commented Nov 12, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.17%. Comparing base (8e07911) to head (2724589).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #790   +/-   ##
=======================================
  Coverage   80.17%   80.17%           
=======================================
  Files          18       18           
  Lines        4882     4882           
  Branches     1085     1085           
=======================================
  Hits         3914     3914           
  Misses        604      604           
  Partials      364      364           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Also revert the Markdown reformatting biome did in the auto-fix commit.
@flying-sheep
flying-sheep merged commit 8f1ee84 into main Nov 12, 2026
9 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants