Skip to content

build(deps): bump the pre-commit group across 1 directory with 4 updates - #1245

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/pre-commit-3c46c43f34
Open

build(deps): bump the pre-commit group across 1 directory with 4 updates#1245
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/pre-commit-3c46c43f34

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the pre-commit group with 4 updates in the / directory: https://github.com/biomejs/pre-commit, https://github.com/tox-dev/pyproject-fmt, https://github.com/astral-sh/ruff-pre-commit and https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/biomejs/pre-commit from v2.5.10 to 2.5.15

Commits
  • 5090c1e build(deps): bump @​biomejs/biome to 2.5.15
  • 15e565d build(deps): bump @​biomejs/biome to 2.5.14 (#130)
  • df12125 build(deps): bump @​biomejs/biome to 2.5.14
  • ee8656a build(deps): bump @​biomejs/biome to 2.5.13 (#129)
  • 742ab68 build(deps): bump @​biomejs/biome to 2.5.13
  • b9ab2db build(deps): bump @​biomejs/biome to 2.5.12 (#128)
  • 922fba1 build(deps): bump @​biomejs/biome to 2.5.12
  • f559a3c Fix typo (#127)
  • fae863d Fix typo
  • cb10d5a build(deps): bump @​biomejs/biome to 2.5.11 (#126)
  • Additional commits viewable in compare view

Updates https://github.com/tox-dev/pyproject-fmt from v2.28.1 to 2.30.3

Release notes

Sourced from https://github.com/tox-dev/pyproject-fmt's releases.

v2.30.3

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.30.2...v2.30.3

v2.30.2

Full Changelog: tox-dev/pyproject-fmt@v2.30.1...v2.30.2

v2.30.1

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.30.0...v2.30.1

v2.30.0

Full Changelog: tox-dev/pyproject-fmt@v2.29.4...v2.30.0

v2.29.4

Full Changelog: tox-dev/pyproject-fmt@v2.29.3...v2.29.4

v2.29.3

Full Changelog: tox-dev/pyproject-fmt@v2.29.2...v2.29.3

v2.29.2

... (truncated)

Commits

Updates https://github.com/astral-sh/ruff-pre-commit from v0.16.4 to 0.17.1

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.17.1

See: https://github.com/astral-sh/ruff/releases/tag/0.17.1

v0.17.0

See: https://github.com/astral-sh/ruff/releases/tag/0.17.0

v0.16.10

See: https://github.com/astral-sh/ruff/releases/tag/0.16.10

v0.16.9

See: https://github.com/astral-sh/ruff/releases/tag/0.16.9

v0.16.8

See: https://github.com/astral-sh/ruff/releases/tag/0.16.8

v0.16.7

See: https://github.com/astral-sh/ruff/releases/tag/0.16.7

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

v0.16.5

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

Commits
  • 38bfb07 Mirror: 0.17.1
  • 44b5042 Mirror: 0.17.0
  • e2053c9 Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-actions group (#184)
  • f12be1e Mirror: 0.16.10
  • 6089d41 Document adding quarto to types_or for Quarto code fence formatting (#183)
  • a56c0b9 Mirror: 0.16.9
  • 1b18dc6 authorize astral-sh/ruff to dispatch the sync workflow (#182)
  • b00ddae Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-actions group (#181)
  • 2eeb567 Mirror: 0.16.8
  • e8f7d69 Mirror: 0.16.7
  • Additional commits viewable in compare view

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.29.0 to 1.31.1

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.31.1

Sponsorship is appreciated!

Bug Fixes 🐛🔗

v1.31.0

Sponsorship is appreciated!

Enhancements 🌱🔗

  • The typosquat-uses audit now supports pre-commit config inputs (#2437)

  • The self-hosted-runner audit is now significantly more precise (#2350)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)

  • zizmor is now aware of the image_version workflow trigger (#2397)

  • The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)

  • The cache-poisoning audit is now aware of pnpm/setup (#2409)

  • The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)

  • The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)

  • zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)

Bug Fixes 🐛🔗

  • Fixed a class of false positives/imprecisions in adhoc-packages that caused some pnpm and yarn invocations to be misclassified as package installations (#2386)

    Many thanks to @​marcalexiei for implementing this improvement!

  • Fixed a bug where zizmor would fail to honor Git submodules and worktrees when discovering configuration files relative to a repo root (#2390)

  • Fixed a bug where the ref-version-mismatch audit would crash on unusually placed version comments (#2394)

  • Fixed a bug where zizmor would fail to handle some pre-commit inputs that use prek extensions to the language_version and default_language_version keys (#2413)

  • Fixed a bug where the use-trusted-publishing audit would fail to detect certain true-positive patterns inside of PowerShell blocks (#2444)

... (truncated)

Commits
  • c92afdf Mirror: 1.31.1
  • d25b2b1 Mirror: 1.31.0
  • 04df6d7 chore: drop Python 3.10 support (EOL) (#65)
  • fe0957c Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-actions group (#64)
  • de807da Bump the github-actions group with 2 updates (#63)
  • fa41207 Mirror: 1.30.1
  • 7361a0b fix: include pre-commit files in hook (#59)
  • 34c5ce3 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the github-actions group...
  • cef8b83 Mirror: 1.30.0
  • 2e74fc1 Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group (#61)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Sep 11, 2026
@LucaMarconato
LucaMarconato enabled auto-merge (squash) September 11, 2026 14:21
@codecov

codecov Bot commented Sep 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.43%. Comparing base (1d5dcbe) to head (efcb1cb).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #1245   +/-   ##
=======================================
  Coverage   91.43%   91.43%           
=======================================
  Files          53       53           
  Lines        8395     8395           
=======================================
  Hits         7676     7676           
  Misses        719      719
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot Bot changed the title build(deps): bump the pre-commit group with 4 updates build(deps): bump the pre-commit group across 1 directory with 4 updates Sep 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pre_commit/pre-commit-3c46c43f34 branch from ada84e0 to 12eb04f Compare September 30, 2026 04:24
@dependabot
dependabot Bot force-pushed the dependabot/pre_commit/pre-commit-3c46c43f34 branch 2 times, most recently from 3ac8354 to ab4b82d Compare October 21, 2026 04:24
@dependabot
build(deps): bump the pre-commit group across 1 directory with 4 updates
efcb1cb 
Bumps the pre-commit group with 4 updates in the / directory: [https://github.com/biomejs/pre-commit](https://github.com/biomejs/pre-commit), [https://github.com/tox-dev/pyproject-fmt](https://github.com/tox-dev/pyproject-fmt), [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) and [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit).


Updates `https://github.com/biomejs/pre-commit` from v2.5.10 to 2.5.15
- [Release notes](https://github.com/biomejs/pre-commit/releases)
- [Commits](biomejs/pre-commit@v2.5.10...v2.5.15)

Updates `https://github.com/tox-dev/pyproject-fmt` from v2.28.1 to 2.30.3
- [Release notes](https://github.com/tox-dev/pyproject-fmt/releases)
- [Commits](tox-dev/pyproject-fmt@v2.28.1...v2.30.3)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.16.4 to 0.17.1
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.16.4...v0.17.1)

Updates `https://github.com/zizmorcore/zizmor-pre-commit` from v1.29.0 to 1.31.1
- [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.29.0...v1.31.1)

---
updated-dependencies:
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.6
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/biomejs/pre-commit
  dependency-version: 2.5.12
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/tox-dev/pyproject-fmt
  dependency-version: 2.29.3
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/zizmorcore/zizmor-pre-commit
  dependency-version: 1.30.0
  dependency-type: direct:production
  dependency-group: pre-commit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pre_commit/pre-commit-3c46c43f34 branch from ab4b82d to efcb1cb Compare October 28, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants