Skip to content

Bump the pre-commit-hooks group across 1 directory with 9 updates - #17

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/main/pre-commit-hooks-21a07c2a76
Open

Bump the pre-commit-hooks group across 1 directory with 9 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pre_commit/main/pre-commit-hooks-21a07c2a76

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the pre-commit-hooks group with 9 updates in the / directory:

Package From To
https://github.com/python-poetry/poetry 1.8.0 2.4.3
https://github.com/hadialqattan/pycln v2.5.0 2.6.0
https://github.com/astral-sh/ruff-pre-commit v0.9.1 0.16.8
https://github.com/pre-commit/mirrors-mypy v1.14.1 2.3.1
https://github.com/codingjoe/relint 3.3.1 3.5.0
https://github.com/MiraGeoscience/pre-commit-hooks v1.0.2 1.1.0
https://github.com/codespell-project/codespell v2.3.0 2.4.3
https://github.com/pre-commit/pre-commit-hooks v5.0.0 6.0.0
https://github.com/rstcheck/rstcheck v6.2.4 6.3.0

Updates https://github.com/python-poetry/poetry from 1.8.0 to 2.4.3

Release notes

Sourced from https://github.com/python-poetry/poetry's releases.

2.4.3

Fixed

  • Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 (#11037).

2.4.2

Fixed

  • Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
  • Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
  • Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).

2.4.1

Changed

  • Re-allow installer==0.7.0 (#10887).

Fixed

  • Fix an issue where poetry update <package> failed when <package> was a transitive dependency (#10885).

2.4.0

Added

  • Add solver.min-release-age setting to require package releases to be a certain number of days old before they are considered during dependency resolution (#10824).
  • Add solver.min-release-age-exclude to exclude selected packages from age filtering (#10824).
  • Add solver.min-release-age-exclude-source to exclude all packages from selected package indexes from age filtering (#10824).

Changed

  • Raise an error instead of silently ignoring a package name that is not a dependency when it is passed to poetry update (#10721).
  • Automatically add a trailing slash to legacy repository URLs (used for publishing) if missing (#10785).
  • Require installer>=1.0.0 (#10869).
  • Allow findpython>=0.8 (#10874).

Fixed

  • Fix an issue where requires-plugins fails on Windows if scheme paths are on different drives (#10869).
  • Fix an issue where the order of markers in the lock file was not deterministic (#10720).
  • Fix an issue where the wrong command was suggested when poetry self commands failed due to an outdated lock file (#10715).
  • Fix an issue where poetry env activate did not work for bash on Windows (#10716).
  • Fix an issue where poetry debug resolve failed when there was a package with a marker (#10807).
  • Fix an issue where the error message about a build backend failure contained garbled --config-settings (#10804).
  • Fix an issue where a false warning about a circular dependency was printed (#10811).
  • Fix an issue where falsy config values were incorrectly treated as not set (#10808).
  • Fix an issue where poetry publish --build ignored failing builds and uploaded stale artifacts (#10802).
  • Fix an issue where poetry publish was aborted instead of retrying after package registration (#10801).
  • Fix an issue where zip files were not closed after fetching metadata via lazy-wheel (#10800).
  • Fix an issue where data fetched via lazy-wheel was corrupted when part of it had already been cached (#10806).
  • Fix an issue where further packages were installed even though installation should be aborted (#10742).

... (truncated)

Changelog

Sourced from https://github.com/python-poetry/poetry's changelog.

[2.4.3] - 2026-09-05

Fixed

  • Fix an issue where Poetry could not extract sdists on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 (#11037).

[2.4.2] - 2026-08-29

Fixed

  • Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
  • Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
  • Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).

[2.4.1] - 2026-05-09

Changed

  • Re-allow installer==0.7.0 (#10887).

Fixed

  • Fix an issue where poetry update <package> failed when <package> was a transitive dependency (#10885).

[2.4.0] - 2026-05-03

Added

  • Add solver.min-release-age setting to require package releases to be a certain number of days old before they are considered during dependency resolution (#10824).
  • Add solver.min-release-age-exclude to exclude selected packages from age filtering (#10824).
  • Add solver.min-release-age-exclude-source to exclude all packages from selected package indexes from age filtering (#10824).

Changed

  • Raise an error instead of silently ignoring a package name that is not a dependency when it is passed to poetry update (#10721).
  • Automatically add a trailing slash to legacy repository URLs (used for publishing) if missing (#10785).
  • Require installer>=1.0.0 (#10869).
  • Allow findpython>=0.8 (#10874).

Fixed

  • Fix an issue where requires-plugins fails on Windows if scheme paths are on different drives (#10869).
  • Fix an issue where the order of markers in the lock file was not deterministic (#10720).
  • Fix an issue where the wrong command was suggested when poetry self commands failed due to an outdated lock file (#10715).
  • Fix an issue where poetry env activate did not work for bash on Windows (#10716).
  • Fix an issue where poetry debug resolve failed when there was a package with a marker (#10807).
  • Fix an issue where the error message about a build backend failure contained garbled --config-settings (#10804).

... (truncated)

Commits
  • 4d69b9b release: bump version to 2.4.3
  • 4659943 Fix sdist extraction on older Python versions (#11037)
  • 15ce1fc release: bump version to 2.4.2
  • 3dd0f2d perf: avoid unnecessary downloads when the index does not provide hashes
  • c2f9af2 Fail closed when a locked hash cannot be checked
  • 3a194dd fix: reject invalid link filenames when downloading files (#11029)
  • 22173fd fix: refuse to write files outside the target directory during sdist extracti...
  • 811a12d release: bump version to 2.4.1
  • c273de5 deps: re-allow installer 0.7.0 (#10887)
  • e75f034 test: assert config migration results (#10884)
  • Additional commits viewable in compare view

Updates https://github.com/hadialqattan/pycln from v2.5.0 to 2.6.0

Release notes

Sourced from https://github.com/hadialqattan/pycln's releases.

v2.6.0

Fixed

Changed

Changelog

Sourced from https://github.com/hadialqattan/pycln's changelog.

[2.6.0] - 2025-10-21

Fixed

Changed

Commits
  • c722dfa Bump v2.6.0
  • bb869d2 add: Python 3.13 & 3.14 to the CI (#279)
  • d4f37a7 change: Drop Python 3.8 Support (#278)
  • 9553f79 fix: use ast.Constant for str node handling since ast.Str was deprecated in P...
  • 87c8abc Bump typer from 0.17.3 to 0.19.2 (#275)
  • 4757255 Bump codecov/codecov-action from 5.5.0 to 5.5.1 (#273)
  • 7c029bc Bump actions/setup-python from 5 to 6 (#272)
  • cf06c3b Bump codecov/codecov-action from 5.4.3 to 5.5.0 (#270)
  • d01c31b Bump typer from 0.16.0 to 0.17.3 (#271)
  • 98dcfba Bump actions/checkout from 4 to 5 (#269)
  • Additional commits viewable in compare view

Updates https://github.com/astral-sh/ruff-pre-commit from v0.9.1 to 0.16.8

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.8

See: https://github.com/astral-sh/ruff/releases/tag/0.16.8

v0.16.7

See: https://github.com/astral-sh/ruff/releases/tag/0.16.7

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

v0.16.5

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

v0.16.4

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

v0.16.1

See: https://github.com/astral-sh/ruff/releases/tag/0.16.1

v0.16.0

See: https://github.com/astral-sh/ruff/releases/tag/0.16.0

v0.15.22

See: https://github.com/astral-sh/ruff/releases/tag/0.15.22

v0.15.21

See: https://github.com/astral-sh/ruff/releases/tag/0.15.21

v0.15.20

See: https://github.com/astral-sh/ruff/releases/tag/0.15.20

v0.15.19

See: https://github.com/astral-sh/ruff/releases/tag/0.15.19

v0.15.18

See: https://github.com/astral-sh/ruff/releases/tag/0.15.18

v0.15.17

See: https://github.com/astral-sh/ruff/releases/tag/0.15.17

v0.15.16

See: https://github.com/astral-sh/ruff/releases/tag/0.15.16

v0.15.15

See: https://github.com/astral-sh/ruff/releases/tag/0.15.15

... (truncated)

Commits

Updates https://github.com/pre-commit/mirrors-mypy from v1.14.1 to 2.3.1

Commits

Updates https://github.com/codingjoe/relint from 3.3.1 to 3.5.0

Release notes

Sourced from https://github.com/codingjoe/relint's releases.

3.5.0

What's Changed

New Contributors

Full Changelog: codingjoe/relint@3.4.1...3.5.0

3.4.1

What's Changed

Full Changelog: codingjoe/relint@3.4.0...3.4.1

3.4.0

What's Changed

Full Changelog: codingjoe/relint@3.3.1...3.4.0

Commits
  • b1c90df Resolve #114 -- Always wrap code printed to the console (#146)
  • 757bca4 [pre-commit.ci] pre-commit autoupdate
  • c845e27 [pre-commit.ci] pre-commit autoupdate
  • a9c0e38 Bump actions/checkout from 6 to 7
  • fad6d65 Limit allowed tools
  • d5a7f5f Add Skills via Claude plugin
  • 3751a69 [pre-commit.ci] pre-commit autoupdate
  • d36fea4 Revert funding file
  • 49a477b Fix #133 -- Handle git diff mnemonic prefixes (#137)
  • 8ace03a [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates https://github.com/MiraGeoscience/pre-commit-hooks from v1.0.2 to 1.1.0

Commits

Updates https://github.com/codespell-project/codespell from v2.3.0 to 2.4.3

Release notes

Sourced from https://github.com/codespell-project/codespell's releases.

v2.4.3

What's Changed

... (truncated)

Commits
  • 57b2140 Read only [tool.codespell] from TOML config (#3975)
  • 23b8d94 [pre-commit.ci] pre-commit autoupdate
  • 926c4d6 [pre-commit.ci] pre-commit autoupdate
  • 820a301 Merge pull request #3967 from codespell-project/peternewman-patch-1
  • 9fe42c9 Add common misspellings for reseeve->reserve to dictionary
  • 725173c [pre-commit.ci] pre-commit autoupdate
  • 86c13ee [pre-commit.ci] pre-commit autoupdate
  • 7b9f36c Bump actions/checkout from 6 to 7
  • bcc1b80 Add spelling corrections for simpe and variants.
  • 89584cc [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates https://github.com/pre-commit/pre-commit-hooks from v5.0.0 to 6.0.0

Release notes

Sourced from https://github.com/pre-commit/pre-commit-hooks's releases.

pre-commit-hooks v6.0.0

Fixes

Migrating

Changelog

Sourced from https://github.com/pre-commit/pre-commit-hooks's changelog.

6.0.0 - 2025-08-09

Fixes

Migrating

Commits
  • 3e8a870 v6.0.0
  • a8f8651 Merge pull request #1185 from pre-commit/pre-commit-ci-update-config
  • 1acd88e [pre-commit.ci] pre-commit autoupdate
  • 1450343 Merge pull request #1182 from pre-commit/pre-commit-ci-update-config
  • b554d0a [pre-commit.ci] pre-commit autoupdate
  • 582b9c6 Merge pull request #1174 from pre-commit/pre-commit-ci-update-config
  • 84f8a9d [pre-commit.ci] pre-commit autoupdate
  • ec458dc Merge pull request #1166 from pre-commit/pre-commit-ci-update-config
  • 1ea82df [pre-commit.ci] pre-commit autoupdate
  • 540cd64 Merge pull request #1164 from pre-commit/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Updates https://github.com/rstcheck/rstcheck from v6.2.4 to 6.3.0

Changelog

Sourced from https://github.com/rstcheck/rstcheck's changelog.

v6.3.0 (2026-07-28)

diff v6.2.5...v6.3.0

Documentation

  • switch from sphinx-click to sphinx-typer (#250)

Miscellaneous

  • Bump min. python version to 3.10 (#250)
  • Added python 3.14 to test suite (#250)
  • Bump min. rstcheck-core version to 1.3.1 (#254)
  • Add --sphinx-source-dir flag (#254)

v6.2.5 (2025-06-01)

diff v6.2.4...v6.2.5

Documentation

  • Fix readthedocs config by adding missing build.os value.

Miscellaneous

  • Dropped support for python 3.8
  • Added python 3.13 to tox config as preparation for adding the version to the test pool. (#247)
  • Dropped support for sphinx 5 (#248)
  • Added python 3.13 to CI test pool (#248)
  • Add sphinx 8 to test pool for python version > 3.9 (#249)
Commits
  • d8774e9 "release v6.3.0 [skip ci]"
  • 382bcc8 Merge pull request #254 from rstcheck/support-rstcheck-core-1_3_1
  • 93a53bd update changelog
  • f69ee7c add flag for new sphinx_source_dir setting
  • 88c8248 bump min rstcheck-core version to 1.3.1
  • b4f9612 Merge pull request #253 from rstcheck/pre-commit-ci-update-config
  • 436c085 ignore argument count of cli function
  • 2608287 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 4be06fb [pre-commit.ci] pre-commit autoupdate
  • 96719d9 Merge pull request #250 from rstcheck/pre-commit-ci-update-config
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Aug 25, 2026
Copilot AI lite review requested due to automatic review settings August 25, 2026 02:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Aug 25, 2026
Copilot AI reviewed Aug 25, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s pre-commit toolchain by bumping the pinned rev versions for a set of upstream hook repositories, keeping local lint/format/type-check tooling current and consistent for contributors and CI.

Changes:

  • Bumped poetry hook repo from 1.8.0 to 2.4.1.
  • Bumped lint/type-check related hook repos (pycln, ruff-pre-commit, mirrors-mypy, relint) to newer released versions.
  • Bumped other hook repos (codespell, pre-commit-hooks, rstcheck) to newer released versions.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@dependabot
Bump the pre-commit-hooks group across 1 directory with 9 updates
051a356 
Bumps the pre-commit-hooks group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [https://github.com/python-poetry/poetry](https://github.com/python-poetry/poetry) | `1.8.0` | `2.4.3` |
| [https://github.com/hadialqattan/pycln](https://github.com/hadialqattan/pycln) | `v2.5.0` | `2.6.0` |
| [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) | `v0.9.1` | `0.16.8` |
| [https://github.com/pre-commit/mirrors-mypy](https://github.com/pre-commit/mirrors-mypy) | `v1.14.1` | `2.3.1` |
| [https://github.com/codingjoe/relint](https://github.com/codingjoe/relint) | `3.3.1` | `3.5.0` |
| [https://github.com/MiraGeoscience/pre-commit-hooks](https://github.com/MiraGeoscience/pre-commit-hooks) | `v1.0.2` | `1.1.0` |
| [https://github.com/codespell-project/codespell](https://github.com/codespell-project/codespell) | `v2.3.0` | `2.4.3` |
| [https://github.com/pre-commit/pre-commit-hooks](https://github.com/pre-commit/pre-commit-hooks) | `v5.0.0` | `6.0.0` |
| [https://github.com/rstcheck/rstcheck](https://github.com/rstcheck/rstcheck) | `v6.2.4` | `6.3.0` |



Updates `https://github.com/python-poetry/poetry` from 1.8.0 to 2.4.3
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@1.8.0...2.4.3)

Updates `https://github.com/hadialqattan/pycln` from v2.5.0 to 2.6.0
- [Release notes](https://github.com/hadialqattan/pycln/releases)
- [Changelog](https://github.com/hadialqattan/pycln/blob/master/docs/CHANGELOG.md)
- [Commits](hadialqattan/pycln@v2.5.0...v2.6.0)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.9.1 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.9.1...v0.16.8)

Updates `https://github.com/pre-commit/mirrors-mypy` from v1.14.1 to 2.3.1
- [Commits](pre-commit/mirrors-mypy@v1.14.1...v2.3.1)

Updates `https://github.com/codingjoe/relint` from 3.3.1 to 3.5.0
- [Release notes](https://github.com/codingjoe/relint/releases)
- [Commits](codingjoe/relint@3.3.1...3.5.0)

Updates `https://github.com/MiraGeoscience/pre-commit-hooks` from v1.0.2 to 1.1.0
- [Release notes](https://github.com/MiraGeoscience/pre-commit-hooks/releases)
- [Commits](v1.0.2...v1.1.0)

Updates `https://github.com/codespell-project/codespell` from v2.3.0 to 2.4.3
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.3.0...v2.4.3)

Updates `https://github.com/pre-commit/pre-commit-hooks` from v5.0.0 to 6.0.0
- [Release notes](https://github.com/pre-commit/pre-commit-hooks/releases)
- [Changelog](https://github.com/pre-commit/pre-commit-hooks/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit-hooks@v5.0.0...v6.0.0)

Updates `https://github.com/rstcheck/rstcheck` from v6.2.4 to 6.3.0
- [Changelog](https://github.com/rstcheck/rstcheck/blob/main/CHANGELOG.md)
- [Commits](rstcheck/rstcheck@v6.2.4...v6.3.0)

---
updated-dependencies:
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.4
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/codespell-project/codespell
  dependency-version: 2.4.3
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/codingjoe/relint
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/hadialqattan/pycln
  dependency-version: 2.6.0
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/MiraGeoscience/pre-commit-hooks
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/pre-commit/mirrors-mypy
  dependency-version: 2.3.1
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/pre-commit/pre-commit-hooks
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/python-poetry/poetry
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/rstcheck/rstcheck
  dependency-version: 6.3.0
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the pre-commit-hooks group with 9 updates Bump the pre-commit-hooks group across 1 directory with 9 updates Sep 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pre_commit/main/pre-commit-hooks-21a07c2a76 branch from 4ac8fb1 to 051a356 Compare September 22, 2026 15:48
@github-actions

github-actions Bot commented Sep 22, 2026

Copy link
Copy Markdown

⚠️ Force push detected - Previous Copilot review comments may no longer be relevant to the current code. Please resolve any outdated threads and re-request a Copilot review when ready.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant