Skip to content

Bump the pre-commit-hooks group across 1 directory with 5 updates - #61

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pre_commit/develop/pre-commit-hooks-7b1274a148
Open

Bump the pre-commit-hooks group across 1 directory with 5 updates#61
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pre_commit/develop/pre-commit-hooks-7b1274a148

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown

Bumps the pre-commit-hooks group with 5 updates in the / directory:

Package From To
https://github.com/python-poetry/poetry 2.4.1 2.4.2
https://github.com/astral-sh/ruff-pre-commit v0.15.20 0.16.6
https://github.com/pre-commit/mirrors-mypy v2.1.0 2.3.1
https://github.com/codespell-project/codespell v2.4.2 2.4.3
https://github.com/rstcheck/rstcheck v6.2.5 6.3.0

Updates https://github.com/python-poetry/poetry from 2.4.1 to 2.4.2

Release notes

Sourced from https://github.com/python-poetry/poetry's releases.

2.4.2

Fixed

  • Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
  • Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
  • Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).
Changelog

Sourced from https://github.com/python-poetry/poetry's changelog.

[2.4.2] - 2026-08-29

Fixed

  • Fix an issue where Poetry installs an artifact that is not listed in the lockfile when the package source does not provide a hash for this artifact (#11030).
  • Fix a path traversal vulnerability when downloading files from a compromised URL and/or package source (#11029).
  • Fix a path traversal vulnerability in sdist extraction on Python 3.10.0-3.10.12 and 3.11.0-3.11.4 that could allow malicious tarball files to write files outside the target directory (#11027).
Commits
  • 15ce1fc release: bump version to 2.4.2
  • 3dd0f2d perf: avoid unnecessary downloads when the index does not provide hashes
  • c2f9af2 Fail closed when a locked hash cannot be checked
  • 3a194dd fix: reject invalid link filenames when downloading files (#11029)
  • 22173fd fix: refuse to write files outside the target directory during sdist extracti...
  • See full diff in compare view

Updates https://github.com/astral-sh/ruff-pre-commit from v0.15.20 to 0.16.6

Release notes

Sourced from https://github.com/astral-sh/ruff-pre-commit's releases.

v0.16.6

See: https://github.com/astral-sh/ruff/releases/tag/0.16.6

v0.16.5

See: https://github.com/astral-sh/ruff/releases/tag/0.16.5

v0.16.4

See: https://github.com/astral-sh/ruff/releases/tag/0.16.4

v0.16.3

See: https://github.com/astral-sh/ruff/releases/tag/0.16.3

v0.16.2

See: https://github.com/astral-sh/ruff/releases/tag/0.16.2

v0.16.1

See: https://github.com/astral-sh/ruff/releases/tag/0.16.1

v0.16.0

See: https://github.com/astral-sh/ruff/releases/tag/0.16.0

v0.15.22

See: https://github.com/astral-sh/ruff/releases/tag/0.15.22

v0.15.21

See: https://github.com/astral-sh/ruff/releases/tag/0.15.21

Commits

Updates https://github.com/pre-commit/mirrors-mypy from v2.1.0 to 2.3.1

Commits

Updates https://github.com/codespell-project/codespell from v2.4.2 to 2.4.3

Release notes

Sourced from https://github.com/codespell-project/codespell's releases.

v2.4.3

What's Changed

... (truncated)

Commits
  • 57b2140 Read only [tool.codespell] from TOML config (#3975)
  • 23b8d94 [pre-commit.ci] pre-commit autoupdate
  • 926c4d6 [pre-commit.ci] pre-commit autoupdate
  • 820a301 Merge pull request #3967 from codespell-project/peternewman-patch-1
  • 9fe42c9 Add common misspellings for reseeve->reserve to dictionary
  • 725173c [pre-commit.ci] pre-commit autoupdate
  • 86c13ee [pre-commit.ci] pre-commit autoupdate
  • 7b9f36c Bump actions/checkout from 6 to 7
  • bcc1b80 Add spelling corrections for simpe and variants.
  • 89584cc [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates https://github.com/rstcheck/rstcheck from v6.2.5 to 6.3.0

Changelog

Sourced from https://github.com/rstcheck/rstcheck's changelog.

v6.3.0 (2026-07-28)

diff v6.2.5...v6.3.0

Documentation

  • switch from sphinx-click to sphinx-typer (#250)

Miscellaneous

  • Bump min. python version to 3.10 (#250)
  • Added python 3.14 to test suite (#250)
  • Bump min. rstcheck-core version to 1.3.1 (#254)
  • Add --sphinx-source-dir flag (#254)
Commits
  • d8774e9 "release v6.3.0 [skip ci]"
  • 382bcc8 Merge pull request #254 from rstcheck/support-rstcheck-core-1_3_1
  • 93a53bd update changelog
  • f69ee7c add flag for new sphinx_source_dir setting
  • 88c8248 bump min rstcheck-core version to 1.3.1
  • b4f9612 Merge pull request #253 from rstcheck/pre-commit-ci-update-config
  • 436c085 ignore argument count of cli function
  • 2608287 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 4be06fb [pre-commit.ci] pre-commit autoupdate
  • 96719d9 Merge pull request #250 from rstcheck/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pre-commit-hooks group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [https://github.com/python-poetry/poetry](https://github.com/python-poetry/poetry) | `2.4.1` | `2.4.2` |
| [https://github.com/astral-sh/ruff-pre-commit](https://github.com/astral-sh/ruff-pre-commit) | `v0.15.20` | `0.16.6` |
| [https://github.com/pre-commit/mirrors-mypy](https://github.com/pre-commit/mirrors-mypy) | `v2.1.0` | `2.3.1` |
| [https://github.com/codespell-project/codespell](https://github.com/codespell-project/codespell) | `v2.4.2` | `2.4.3` |
| [https://github.com/rstcheck/rstcheck](https://github.com/rstcheck/rstcheck) | `v6.2.5` | `6.3.0` |



Updates `https://github.com/python-poetry/poetry` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/python-poetry/poetry/releases)
- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)
- [Commits](python-poetry/poetry@2.4.1...2.4.2)

Updates `https://github.com/astral-sh/ruff-pre-commit` from v0.15.20 to 0.16.6
- [Release notes](https://github.com/astral-sh/ruff-pre-commit/releases)
- [Commits](astral-sh/ruff-pre-commit@v0.15.20...v0.16.6)

Updates `https://github.com/pre-commit/mirrors-mypy` from v2.1.0 to 2.3.1
- [Commits](pre-commit/mirrors-mypy@v2.1.0...v2.3.1)

Updates `https://github.com/codespell-project/codespell` from v2.4.2 to 2.4.3
- [Release notes](https://github.com/codespell-project/codespell/releases)
- [Commits](codespell-project/codespell@v2.4.2...v2.4.3)

Updates `https://github.com/rstcheck/rstcheck` from v6.2.5 to 6.3.0
- [Changelog](https://github.com/rstcheck/rstcheck/blob/main/CHANGELOG.md)
- [Commits](rstcheck/rstcheck@v6.2.5...v6.3.0)

---
updated-dependencies:
- dependency-name: https://github.com/python-poetry/poetry
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/astral-sh/ruff-pre-commit
  dependency-version: 0.16.6
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/pre-commit/mirrors-mypy
  dependency-version: 2.3.1
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/codespell-project/codespell
  dependency-version: 2.4.3
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
- dependency-name: https://github.com/rstcheck/rstcheck
  dependency-version: 6.3.0
  dependency-type: direct:production
  dependency-group: pre-commit-hooks
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code labels Sep 8, 2026
Copilot AI lite review requested due to automatic review settings September 8, 2026 10:08

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The change is limited to straightforward version bumps in .pre-commit-config.yaml with no apparent configuration or YAML-structure issues.

Pull request overview

This PR updates the repository’s pre-commit tooling pins to newer upstream versions, keeping local developer checks and CI autoupdate behavior current and benefiting from recent fixes in those tools.

Changes:

  • Bump python-poetry/poetry hook revision from 2.4.1 to 2.4.2.
  • Bump ruff-pre-commit, mirrors-mypy, and codespell hook revisions to their newer releases.
  • Bump rstcheck hook revision from v6.2.5 to v6.3.0.
File summaries
File Description
.pre-commit-config.yaml Updates pinned rev values for several pre-commit hook repositories to newer versions.
Review details
  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file pre_commit Pull requests that update pre_commit code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant