Skip to content

build(deps): bump the pre-commit group across 1 directory with 4 updates - #10

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/pre-commit-7c437f0d01
Open

build(deps): bump the pre-commit group across 1 directory with 4 updates#10
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/pre-commit-7c437f0d01

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown

Bumps the pre-commit group with 4 updates in the / directory: https://github.com/biomejs/pre-commit, https://github.com/tox-dev/pyproject-fmt, https://github.com/astral-sh/ruff-pre-commit and https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/biomejs/pre-commit from v2.5.5 to 2.5.10

Commits
  • 055c65a build(deps): bump @​biomejs/biome to 2.5.10
  • ebecc6c build(deps): bump @​biomejs/biome to 2.5.9 (#124)
  • 3a0c645 build(deps): bump @​biomejs/biome to 2.5.9
  • 25eda76 build(deps): bump @​biomejs/biome to 2.5.8 (#123)
  • 81bba2b build(deps): bump @​biomejs/biome to 2.5.8
  • 0204533 build(deps): bump @​biomejs/biome to 2.5.7 (#122)
  • d33e749 build(deps): bump @​biomejs/biome to 2.5.7
  • 072ac07 build(deps): bump @​biomejs/biome to 2.5.6 (#121)
  • cd5d6ed build(deps): bump @​biomejs/biome to 2.5.6
  • 4c53f19 build(deps): bump @​biomejs/biome to 2.5.5 (#120)
  • See full diff in compare view

Updates https://github.com/tox-dev/pyproject-fmt from v2.25.3 to 2.28.0

Release notes

Sourced from https://github.com/tox-dev/pyproject-fmt's releases.

v2.28.0

Full Changelog: tox-dev/pyproject-fmt@v2.27.1...v2.28.0

v2.27.1

Full Changelog: tox-dev/pyproject-fmt@v2.27.0...v2.27.1

v2.27.0

Full Changelog: tox-dev/pyproject-fmt@v2.26.0...v2.27.0

v2.26.0

Full Changelog: tox-dev/pyproject-fmt@v2.25.4...v2.26.0

v2.25.4

What's Changed

Full Changelog: tox-dev/pyproject-fmt@v2.25.3...v2.25.4

Commits

Updates https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.4

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.4

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

v0.16.1

See: https://github.com/astral-sh/ruff/releases/tag/0.16.1

Commits

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.28.0 to 1.29.0

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.29.0

New Features 🌈🔗

  • zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)

  • New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)

  • zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)

Changes ⚠️🔗

Removals 🌅🔗

  • --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)

Bug Fixes 🐛🔗

  • Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)

  • Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)

  • Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Aug 22, 2026
Bumps the pre-commit group with 4 updates in the / directory: [https://github.com/biomejs/pre-commit](https://github.com/biomejs/pre-commit), [https://github.com/tox-dev/pyproject-fmt](https://github.com/tox-dev/pyproject-fmt), [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) and [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit).


Updates `https://github.com/biomejs/pre-commit` from v2.5.5 to 2.5.10
- [Release notes](https://github.com/biomejs/pre-commit/releases)
- [Commits](biomejs/pre-commit@v2.5.5...v2.5.10)

Updates `https://github.com/tox-dev/pyproject-fmt` from v2.25.3 to 2.28.0
- [Release notes](https://github.com/tox-dev/pyproject-fmt/releases)
- [Commits](tox-dev/pyproject-fmt@v2.25.3...v2.28.0)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.16.0 to 0.16.4
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.16.0...v0.16.4)

Updates `https://github.com/zizmorcore/zizmor-pre-commit` from v1.28.0 to 1.29.0
- [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases)
- [Commits](zizmorcore/zizmor-pre-commit@v1.28.0...v1.29.0)

---
updated-dependencies:
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.3
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/biomejs/pre-commit
  dependency-version: 2.5.8
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/tox-dev/pyproject-fmt
  dependency-version: 2.27.1
  dependency-type: direct:production
  dependency-group: pre-commit
- dependency-name: https://github.com/zizmorcore/zizmor-pre-commit
  dependency-version: 1.29.0
  dependency-type: direct:production
  dependency-group: pre-commit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the pre-commit group with 4 updates build(deps): bump the pre-commit group across 1 directory with 4 updates Aug 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pre_commit/pre-commit-7c437f0d01 branch from ceec30e to 24846cb Compare August 29, 2026 05:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants