[jeancochrane]

We need to update gh-action-pypi-publish in order to pull in the patch for GHSA-5xjx-3w67-w9x9. See the release notes: https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.14.3.

While we're here, we also need to make two small changes to fix builds:

1. Add DyfanJones/noctua to the Remotes section of DESCRIPTION, since the package has been temporarily removed from CRAN
2. Upgrade R pre-commit hooks, which are failing to install on R 4.6 (not currently affecting CI however, which is still running R 4.5)

I tried to test this change by running the workflow to upload the package to the PyPI test instance, but as you can see from the logs, the upload failed because the current package version already exists on the test PyPI instance. I thought about deleting the existing file to complete the test, but on reflection, it seems to me that this 400 is an indication that the gh-action-pypi-publish action is working as expected, so I think it's fine to move forward even without the workflow passing.

[jeancochrane]

This line was tripping the vector_logic_linter; see the pre-commit logs. I think it should be fine to switch to the scalar conditional operator || because mapply() should ensure that x and y are always scalar values, unless the user happens to erroneously pass a nested list of vectors for either the start_year or town arguments (in which case this conditional would just error out, I think).