chore: bump https://github.com/zizmorcore/zizmor-pre-commit from v1.28.0 to 1.29.0 in the pre-commit group across 1 directory

[dependabot]

Bumps the pre-commit group with 1 update in the / directory: https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.28.0 to 1.29.0

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.29.0

New Features 🌈🔗

• zizmor now has experimental support for auditing pre-commit inputs, meaning both pre-commit configuration and hook definitions (#2209)

• New audit: insecure-url-scheme detects usages of insecure (i.e. plaintext) protocols when making network requests. The initial version of this audit is limited to pre-commit inputs only (#2228)

• zizmor now supports GitHub's "self-repository" reference syntax for local actions, e.g. uses: $/foo/bar instead of a manual checkout and uses: ./foo/bar (#2248)

Changes ⚠️🔗

• The unpinned-uses and unpinned-images audits have been separated more cleanly: unpinned-uses is now principally responsible for Git-style uses: clauses, whereas unpinned-images is now responsible for docker://-style uses: clauses (in addition to already checking other image references) (#2222)

Removals 🌅🔗

• --collect=workflows-only and --collect=actions-only have been fully removed. Use --collect=workflows and --collect=actions for the replacement behavior (#2242)

Bug Fixes 🐛🔗

• Fixed a bug where zizmor would reject a valid workflow definition for containing a literal jobs..outputs. value for being a non-string (#2220)

• Fixed a bug where the github-app audit would incorrectly flag some usages as needing a repositories: key, despite requesting organization-level-only permissions (#2227)

• Fixed a class of bugs where zizmor would discover the user's configuration in unintuitive ways. When auditing from a Git repository, zizmor now uses the repository root to discover configuration consistently (#2234)

Commits

• 451b56a Mirror: 1.29.0
• c7cc406 Use upstream zizmor release notes for releases (#51)
• 8f87f00 Bump the github-actions group with 3 updates (#54)
• See full diff in compare view

[netopsengineer]

@dependabot rebase

[github-actions]

Approved automatically for a trusted Dependabot revision.

[github-actions]

Approved automatically for a trusted Dependabot revision.