Skip to content

build(deps): bump the pre-commit-hooks group with 7 updates#6745

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pre_commit/pre-commit-hooks-f4f28b318d
Closed

build(deps): bump the pre-commit-hooks group with 7 updates#6745
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pre_commit/pre-commit-hooks-f4f28b318d

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 12, 2026

Bumps the pre-commit-hooks group with 7 updates:

Package From To
https://github.com/oxipng/oxipng v10.0.0 10.1.0
https://github.com/Lucas-C/pre-commit-hooks v1.5.5 1.5.6
https://github.com/rhysd/actionlint v1.7.9 1.7.11
https://github.com/codespell-project/codespell v2.4.1 2.4.2
https://github.com/igorshubovych/markdownlint-cli v0.46.0 0.48.0
https://github.com/rubocop/rubocop v1.81.7 1.85.1
https://github.com/adrienverge/yamllint v1.37.1 1.38.0

Updates https://github.com/oxipng/oxipng from v10.0.0 to 10.1.0

Release notes

Sourced from https://github.com/oxipng/oxipng's releases.

v10.1.0

  • [Feature] Add --json option for machine-readable output.
  • [Improvement] New default output with file counter and summary. (Use an extra -v flag to get the same output as before.)
  • [Bugfix] Fix fast mode sometimes giving suboptimal results for small, indexed images.
Changelog

Sourced from https://github.com/oxipng/oxipng's changelog.

Version 10.1.0

  • [Feature] Add --json option for machine-readable output.
  • [Improvement] New default output with file counter and summary. (Use an extra -v flag to get the same output as before.)
  • [Bugfix] Fix fast mode sometimes giving suboptimal results for small, indexed images.
Commits
  • d54e7c0 v10.1 (#769)
  • ff168f5 Add json output option (#761)
  • a8edb28 Show summary of results (#758)
  • d48b147 Tweak output when not optimised (#765)
  • 155eeb3 chore(deps): bump dawidd6/action-download-artifact from 11 to 12 (#760)
  • 8665b2d chore(deps): bump the rust-dependencies group across 1 directory with 2 updat...
  • e5e1568 Rework preserving attributes (#759)
  • 8754013 chore(deps): bump actions/upload-artifact from 5 to 6 (#756)
  • a0f4e75 chore(deps): bump log from 0.4.28 to 0.4.29 in the rust-dependencies group (#...
  • fa2c690 Ensure evaluator returns no result when all candidates are too large (#754)
  • Additional commits viewable in compare view

Updates https://github.com/Lucas-C/pre-commit-hooks from v1.5.5 to 1.5.6

Release notes

Sourced from https://github.com/Lucas-C/pre-commit-hooks's releases.

Run the hooks also in the manual stage + fix --insert-license-after-regex

Commits

Updates https://github.com/rhysd/actionlint from v1.7.9 to 1.7.11

Release notes

Sourced from https://github.com/rhysd/actionlint's releases.

v1.7.11

  • Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @​heppu)
    env:
      # ERROR: case() requires an odd number of arguments
      ENVIRONMENT: |-
        ${{ case(
          github.ref == 'refs/heads/main', 'production',
          github.ref == 'refs/heads/staging', 'staging'
        ) }}
  • Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @​hugovk and @​muzimuzhi)
  • Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @​takaram)
    $ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
    $ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
    Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
    Loaded 1 attestation from GitHub API
    The following policy criteria will be enforced:
    
    Predicate type must match:................ https://slsa.dev/provenance/v1
    Source Repository Owner URI must match:... https://github.com/rhysd
    Source Repository URI must match:......... https://github.com/rhysd/actionlint
    Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
    OIDC Issuer must match:................... https://token.actions.githubusercontent.com
    
    ✓ Verification succeeded!
    The following 1 attestation matched the policy criteria
    
    Attestation #1
    
    Build repo:..... rhysd/actionlint
    Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
    Signer repo:.... rhysd/actionlint
    Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
  • Report path filters with ./ as error because they never match anything. (#521)
    on:
      push:
        paths:
          # ERROR: This never matches anything. `foo/bar.txt` is correct.
          - ./foo/bar.txt
  • Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @​michaelgruenewald)
  • Fix stack overflow crash by a recursive anchor in matrix items. (#610)
  • Fix an unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)
  • Reduce the number of memory allocations on resolving anchors.
  • Update the popular actions data set to the latest.
  • Update Go dependencies to the latest.
  • ... (truncated)

    Changelog

    Sourced from https://github.com/rhysd/actionlint's changelog.

    v1.7.11 - 2026-02-14

    • Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @​heppu)
      env:
        # ERROR: case() requires an odd number of arguments
        ENVIRONMENT: |-
          ${{ case(
            github.ref == 'refs/heads/main', 'production',
            github.ref == 'refs/heads/staging', 'staging'
          ) }}
    • Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @​hugovk and @​muzimuzhi)
    • Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @​takaram)
      $ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
      $ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
      Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
      Loaded 1 attestation from GitHub API
      The following policy criteria will be enforced:
      
      Predicate type must match:................ https://slsa.dev/provenance/v1
      Source Repository Owner URI must match:... https://github.com/rhysd
      Source Repository URI must match:......... https://github.com/rhysd/actionlint
      Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
      OIDC Issuer must match:................... https://token.actions.githubusercontent.com
      
      ✓ Verification succeeded!
      The following 1 attestation matched the policy criteria
      
      Attestation #1
      
      Build repo:..... rhysd/actionlint
      Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
      Signer repo:.... rhysd/actionlint
      Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
  • Report path filters with ./ because they never match anything. (#521)
    on:
      push:
        paths:
          # ERROR: This never matches anything. `foo/bar.txt` is correct.
          - ./foo/bar.txt
  • Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @​michaelgruenewald)
  • Fix stack overflow crash by a recursive anchor in matrix items. (#610)
  • Fix a unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)
  • Reduce the number of memory allocations on resolving anchors.
  • Update the popular actions data set to the latest.
  • ... (truncated)

    Commits
    • 393031a bump up version to v1.7.11
    • 63589e8 add link to the release note of the version in playground heading
    • 58a2626 remove legacy Homebrew formula
    • d22c104 fix test script for download script to check error case failures
    • 50d2134 describe how to download and verify artifact using gh (fix #617)
    • 226bb4a update playground npm deps including jsdom v28
    • 1e85edb disable SC2153 shellcheck rule to avoid unassigned variable false positive (f...
    • 8776d64 Merge pull request #619 from takaram/patch-1
    • e3eb8cb reduce memory allocations on resolving anchors
    • db08cec Fix variable name in release workflow
    • Additional commits viewable in compare view

    Updates https://github.com/codespell-project/codespell from v2.4.1 to 2.4.2

    Release notes

    Sourced from https://github.com/codespell-project/codespell's releases.

    v2.4.2

    Highlights

    • Fixed compatibility with chardet 7+

    What's Changed

    ... (truncated)

    Commits
    • 2ccb47f Compat with chardet 7 (#3886)
    • 4ec53bf [pre-commit.ci] pre-commit autoupdate
    • 2a4acba Bump actions/download-artifact from 7 to 8
    • be17cac Bump actions/upload-artifact from 6 to 7
    • 04a0712 Bump ruff (#3879)
    • 583d879 avoide->avoid, avoided, avoids,
    • 1f59f34 Add correction for 'foudation' to 'foundation'
    • e047fda Add spelling correction for gather and variants.
    • b5cd66d respondant->respondent
    • 92125a3 Add detection of ivoice and variants.
    • Additional commits viewable in compare view

    Updates https://github.com/igorshubovych/markdownlint-cli from v0.46.0 to 0.48.0

    Release notes

    Sourced from https://github.com/igorshubovych/markdownlint-cli's releases.

    v0.48.0

    • Update all dependencies via Dependabot

    v0.47.0

    • Add output and exit code support for warnings
    • Update markdownlint dependency to 0.40.0
      • Improve MD011/MD013/MD051/MD060
    • Update all dependencies via Dependabot
    Commits
    • e72a3ca Bump version 0.48.0
    • 02c6132 Delete and recreate package-lock.json via "npm install".
    • 800b47c Bump ava from 6.4.1 to 7.0.0
    • e6eb97c Bump minimatch
    • 61da922 Bump tar from 7.5.7 to 7.5.9
    • 3731696 Bump minimatch from 10.2.0 to 10.2.2
    • d60f5af Bump minimatch from 10.1.2 to 10.2.0
    • 587b174 Bump markdown-it from 14.1.0 to 14.1.1
    • c3bfec9 Bump minimatch from 10.1.1 to 10.1.2
    • 1fba958 Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1
    • Additional commits viewable in compare view

    Updates https://github.com/rubocop/rubocop from v1.81.7 to 1.85.1

    Release notes

    Sourced from https://github.com/rubocop/rubocop's releases.

    RuboCop v1.85.1

    Bug fixes

    • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. (@​sferik)
    • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. (@​sferik)
    • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. (@​koic)

    Changes

    RuboCop v1.85.0

    New features

    Bug fixes

    • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. (@​koic)
    • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. (@​koic)
    • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
    • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
    • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
    • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. (@​koic)
    • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. (@​sferik)
    • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). (@​sferik)
    • #14931: Ignore directive comments inside comments. (@​koic)
    • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
    • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
    • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. (@​koic)
    • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])

    ... (truncated)

    Changelog

    Sourced from https://github.com/rubocop/rubocop's changelog.

    1.85.1 (2026-03-03)

    Bug fixes

    • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. ([@​sferik][])
    • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. ([@​sferik][])
    • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. ([@​koic][])

    Changes

    1.85.0 (2026-02-26)

    New features

    Bug fixes

    • #14829: Allow classes without a superclass in Style/EmptyClassDefinition. ([@​koic][])
    • #14873: Fix an error in Style/NegatedWhile when the last expression of an until condition is negated. ([@​koic][])
    • #14827: Improve Style/EmptyClassDefinition message wording. ([@​bbatsov][])
    • #14800: Fix false obsolete configuration error for extracted cops when loaded as plugins. ([@​bbatsov][])
    • #14928: Fix a false positive for Lint/Void when nil is used in case branch. ([@​5hun-s][])
    • #14857: Fix false positives in Style/IfUnlessModifier when modifier forms are used inside string interpolations. ([@​koic][])
    • #8773: Fix false positives in Style/HashTransformKeys and Style/HashTransformValues. ([@​sferik][])
    • #6963: Fix false positives in Lint/Void for each blocks where the return value may be meaningful (e.g., Enumerator#each). ([@​sferik][])
    • #14931: Ignore directive comments inside comments. ([@​koic][])
    • #14834: Fix Layout/IndentationWidth false positive for chained method blocks when EnforcedStyleAlignWith is start_of_line. ([@​krororo][])
    • #14756: Fix Lint/Void to detect void expressions in case/when branches. ([@​bbatsov][])
    • #14874: Fix a Parser::ClobberingError in Lint/UselessAssignment when autocorrecting a useless assignment that wraps a block containing another useless assignment. ([@​koic][])
    • #14880: Fix a false negative in Layout/MultilineAssignmentLayout when using numblock or itblock with SupportedTypes: ['block']. ([@​bbatsov][])
    • #11462: Fix over-indentation when autocorrecting nested hashes with Layout/FirstHashElementIndentation. ([@​ydakuka][])
    • #14880: Recognize block on different line from left side of multi-line assignment in Layout/MultilineAssignmentLayout. ([@​sanfrecce-osaka][])

    ... (truncated)

    Commits
    • fd07672 Cut 1.85.1
    • 5c41f90 Update Changelog
    • 5e8e492 Merge pull request #14975 from sferik/fix_14973
    • 90f3780 Fix Style/ReduceToHash false positive when accumulator is read in key/value
    • 90c7959 Merge pull request #14972 from lovro-bikic/relevant-options-digest-cache
    • 3c20e8d Cache relevant options digest
    • e305f79 Merge pull request #14969 from lovro-bikic/autoload-formatter-constants
    • 3f0a304 Autoload formatters; they're required only when actually used
    • eb973f4 Merge pull request #14966 from koic/fix_false_positives_in_style_redundant_pa...
    • 3338a40 [Fix #14964] Fix false positives in Style/RedundantParentheses
    • Additional commits viewable in compare view

    Updates https://github.com/adrienverge/yamllint from v1.37.1 to 1.38.0

    Changelog

    Sourced from https://github.com/adrienverge/yamllint's changelog.

    1.38.0 (2026-01-13)

    • Add support for Python 3.14, drop support for Python 3.9
    • Require pathspec ≥ 1.0.0
    • Config: Follow gitignore implementation in yaml-files and ignore
    • Config: Use "mapping" instead of "dict" for user-facing errors
    • Rule indentation: Fix error message for check-multi-line-strings
    • Rule quoted-strings: Add quote-type: consistent
    • Docs: Update the name of BSD ports
    • Docs: Enhance wording of recursive directory lint in README
    • Docs: Add Alpine Linux installation instructions in README
    Commits
    • cba56bc yamllint version 1.38.0
    • 9dc506b Require pathspec ≥ 1.0.0 and follow Git's gitignore implementation
    • 73b9c0b Drop support for Python 3.9
    • 22d07ed indentation: Fix error message for check-multi-line-strings
    • cfbfe9b README: Add Alpine Linux installation instructions
    • a3b3bb3 README: Enhance wording of recursive directory lint
    • e3b72f5 quoted-strings: Add missing quote-type: consistent docs
    • e3d54cc quoted-strings: Add quote-type: consistent
    • 0b4ddc8 CI: Update GitHub Actions
    • 866f805 build: Remove license-files from pyproject.toml
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
    • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
    • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
    • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

    Bumps the pre-commit-hooks group with 7 updates:
    
    | Package | From | To |
    | --- | --- | --- |
    | [https://github.com/oxipng/oxipng](https://github.com/oxipng/oxipng) | `v10.0.0` | `10.1.0` |
    | [https://github.com/Lucas-C/pre-commit-hooks](https://github.com/Lucas-C/pre-commit-hooks) | `v1.5.5` | `1.5.6` |
    | [https://github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) | `v1.7.9` | `1.7.11` |
    | [https://github.com/codespell-project/codespell](https://github.com/codespell-project/codespell) | `v2.4.1` | `2.4.2` |
    | [https://github.com/igorshubovych/markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) | `v0.46.0` | `0.48.0` |
    | [https://github.com/rubocop/rubocop](https://github.com/rubocop/rubocop) | `v1.81.7` | `1.85.1` |
    | [https://github.com/adrienverge/yamllint](https://github.com/adrienverge/yamllint) | `v1.37.1` | `1.38.0` |
    
    
    Updates `https://github.com/oxipng/oxipng` from v10.0.0 to 10.1.0
    - [Release notes](https://github.com/oxipng/oxipng/releases)
    - [Changelog](https://github.com/oxipng/oxipng/blob/master/CHANGELOG.md)
    - [Commits](oxipng/oxipng@v10.0.0...v10.1.0)
    
    Updates `https://github.com/Lucas-C/pre-commit-hooks` from v1.5.5 to 1.5.6
    - [Release notes](https://github.com/Lucas-C/pre-commit-hooks/releases)
    - [Commits](Lucas-C/pre-commit-hooks@v1.5.5...v1.5.6)
    
    Updates `https://github.com/rhysd/actionlint` from v1.7.9 to 1.7.11
    - [Release notes](https://github.com/rhysd/actionlint/releases)
    - [Changelog](https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md)
    - [Commits](rhysd/actionlint@v1.7.9...v1.7.11)
    
    Updates `https://github.com/codespell-project/codespell` from v2.4.1 to 2.4.2
    - [Release notes](https://github.com/codespell-project/codespell/releases)
    - [Commits](codespell-project/codespell@v2.4.1...v2.4.2)
    
    Updates `https://github.com/igorshubovych/markdownlint-cli` from v0.46.0 to 0.48.0
    - [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
    - [Commits](igorshubovych/markdownlint-cli@v0.46.0...v0.48.0)
    
    Updates `https://github.com/rubocop/rubocop` from v1.81.7 to 1.85.1
    - [Release notes](https://github.com/rubocop/rubocop/releases)
    - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
    - [Commits](rubocop/rubocop@v1.81.7...v1.85.1)
    
    Updates `https://github.com/adrienverge/yamllint` from v1.37.1 to 1.38.0
    - [Release notes](https://github.com/adrienverge/yamllint/releases)
    - [Changelog](https://github.com/adrienverge/yamllint/blob/master/CHANGELOG.rst)
    - [Commits](adrienverge/yamllint@v1.37.1...v1.38.0)
    
    ---
    updated-dependencies:
    - dependency-name: https://github.com/oxipng/oxipng
      dependency-version: 10.1.0
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/Lucas-C/pre-commit-hooks
      dependency-version: 1.5.6
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/rhysd/actionlint
      dependency-version: 1.7.11
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/codespell-project/codespell
      dependency-version: 2.4.2
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/igorshubovych/markdownlint-cli
      dependency-version: 0.48.0
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/rubocop/rubocop
      dependency-version: 1.85.1
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    - dependency-name: https://github.com/adrienverge/yamllint
      dependency-version: 1.38.0
      dependency-type: direct:production
      dependency-group: pre-commit-hooks
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot dependabot bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Mar 12, 2026
    @dependabot dependabot bot requested a review from matz as a code owner March 12, 2026 08:17
    @dependabot dependabot bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Mar 12, 2026
    @github-actions github-actions bot added the build label Mar 12, 2026
    @dependabot @github
    Copy link
    Contributor Author

    dependabot bot commented on behalf of github Mar 13, 2026

    Looks like these dependencies are updatable in another way, so this is no longer needed.

    @dependabot dependabot bot closed this Mar 13, 2026
    @dependabot dependabot bot deleted the dependabot/pre_commit/pre-commit-hooks-f4f28b318d branch March 13, 2026 14:57
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    build dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    1 participant