chore: bump pre-commit hooks versions - #3050
Conversation
Summary of ChangesHello @robfrank, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request focuses on maintaining code quality and consistency by upgrading the versions of various pre-commit hooks. By bumping these dependencies, the project benefits from the latest bug fixes, performance enhancements, and new features offered by these formatting and linting tools, ensuring a more robust and efficient development workflow. Highlights
🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console. Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request aims to update pre-commit hook versions. While keeping dependencies up-to-date is a great practice, and the change of the prettier mirror is correct as the old one is archived, several of the updated versions specified in .pre-commit-config.yaml do not exist in their respective repositories or package registries. This will cause pre-commit to fail during installation. I've left specific comments with suggestions for the latest valid versions. Please review them and update the configuration accordingly. Note that two of the updates (gruntwork-io/pre-commit and macisamuele/language-formatters-pre-commit-hooks) are correct as the versions exist.
| - id: helmlint | ||
| - repo: https://github.com/pre-commit/pre-commit-hooks | ||
| rev: v5.0.0 | ||
| rev: v6.0.0 |
There was a problem hiding this comment.
The specified revision v6.0.0 for pre-commit/pre-commit-hooks does not appear to be a valid tag in the repository. The latest available version is v4.6.0. Using a non-existent revision will cause pre-commit to fail. Please use a valid version.
rev: v4.6.0| - id: check-xml | ||
| - repo: https://github.com/psf/black | ||
| rev: 24.10.0 | ||
| rev: 25.12.0 |
There was a problem hiding this comment.
The specified revision 25.12.0 for psf/black does not appear to be a valid tag in the repository. The latest available version is 24.4.2. Using a non-existent revision will cause pre-commit to fail. Please use a valid version.
rev: 24.4.2| files: ^bindings/python/.*\.py$ | ||
| - repo: https://github.com/pycqa/isort | ||
| rev: 5.13.2 | ||
| rev: 7.0.0 |
There was a problem hiding this comment.
The specified revision 7.0.0 for pycqa/isort does not appear to be a valid tag in the repository. The version you are upgrading from, 5.13.2, is currently the latest stable version. Using a non-existent revision will cause pre-commit to fail. Please revert this change or use a valid version if a new one has been released.
rev: 5.13.2| files: ^bindings/python/.*\.ya?ml$ | ||
| - repo: https://github.com/scop/pre-commit-shfmt | ||
| rev: v3.10.0-1 | ||
| rev: v3.12.0-2 |
There was a problem hiding this comment.
The specified revision v3.12.0-2 for scop/pre-commit-shfmt does not appear to be a valid tag in the repository. The latest available version is v3.8.0-1. Using a non-existent revision will cause pre-commit to fail. Please use a valid version.
rev: v3.8.0-1| - repo: https://github.com/pre-commit/mirrors-prettier | ||
| rev: v3.1.0 | ||
| - repo: https://github.com/rbubley/mirrors-prettier | ||
| rev: v3.7.4 |
There was a problem hiding this comment.
The specified revision v3.7.4 for rbubley/mirrors-prettier does not appear to be a valid tag in the repository. The latest available tag is v3.1.0. Using a non-existent revision will cause pre-commit to fail.
rev: v3.1.0| additional_dependencies: | ||
| - prettier@3.1.0 | ||
| - prettier-plugin-java@2.4.0 | ||
| - prettier@3.7.4 |
There was a problem hiding this comment.
The specified version prettier@3.7.4 does not appear to be a valid version on npm. The latest version is 3.3.2. This will cause the hook installation to fail. Please use a valid version.
- prettier@3.3.2| - prettier@3.1.0 | ||
| - prettier-plugin-java@2.4.0 | ||
| - prettier@3.7.4 | ||
| - prettier-plugin-java@2.7.7 |
There was a problem hiding this comment.
The specified version prettier-plugin-java@2.7.7 does not appear to be a valid version on npm. The latest version is 2.6.0. This will cause the hook installation to fail. Please use a valid version.
- prettier-plugin-java@2.6.0
🧪 CI InsightsHere's what we observed from your CI run for 207feef. 🟢 All jobs passed!But CI Insights is watching 👀 |
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferences |
(cherry picked from commit 048c629)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.9 to 3.29.11. Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v3.29.11 > -------- > > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > 3.29.11 - 21 Aug 2025 > --------------------- > > * Update default CodeQL bundle version to 2.22.4. [ArcadeData#3044](https://redirect.github.com/github/codeql-action/pull/3044) > > See the full [CHANGELOG.md](https://github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md) for more information. > > v3.29.10 > -------- > > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > 3.29.10 - 18 Aug 2025 > --------------------- > > No user facing changes. > > See the full [CHANGELOG.md](https://github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md) for more information. Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 3.29.11 - 21 Aug 2025 > --------------------- > > * Update default CodeQL bundle version to 2.22.4. [ArcadeData#3044](https://redirect.github.com/github/codeql-action/pull/3044) > > 3.29.10 - 18 Aug 2025 > --------------------- > > No user facing changes. > > 3.29.9 - 12 Aug 2025 > -------------------- > > No user facing changes. > > 3.29.8 - 08 Aug 2025 > -------------------- > > * Fix an issue where the Action would autodetect unsupported languages such as HTML. [ArcadeData#3015](https://redirect.github.com/github/codeql-action/pull/3015) > > 3.29.7 - 07 Aug 2025 > -------------------- > > This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5. > > 3.29.6 - 07 Aug 2025 > -------------------- > > * The `cleanup-level` input to the `analyze` Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. [ArcadeData#2999](https://redirect.github.com/github/codeql-action/pull/2999) > * Update default CodeQL bundle version to 2.22.3. [ArcadeData#3000](https://redirect.github.com/github/codeql-action/pull/3000) > > 3.29.5 - 29 Jul 2025 > -------------------- > > * Update default CodeQL bundle version to 2.22.2. [ArcadeData#2986](https://redirect.github.com/github/codeql-action/pull/2986) > > 3.29.4 - 23 Jul 2025 > -------------------- > > No user facing changes. > > 3.29.3 - 21 Jul 2025 > -------------------- > > No user facing changes. > > 3.29.2 - 30 Jun 2025 > -------------------- > > * Experimental: When the `quality-queries` input for the `init` action is provided with an argument, separate `.quality.sarif` files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. [ArcadeData#2935](https://redirect.github.com/github/codeql-action/pull/2935) > > 3.29.1 - 27 Jun 2025 > -------------------- ... (truncated) Commits * [`3c3833e`](github/codeql-action@3c3833e) Merge pull request [ArcadeData#3052](https://redirect.github.com/github/codeql-action/issues/3052) from github/update-v3.29.11-14148a433 * [`8c4bfbd`](github/codeql-action@8c4bfbd) Update changelog for v3.29.11 * [`14148a4`](github/codeql-action@14148a4) Merge pull request [ArcadeData#3044](https://redirect.github.com/github/codeql-action/issues/3044) from github/update-bundle/codeql-bundle-v2.22.4 * [`71b2cb3`](github/codeql-action@71b2cb3) Add changelog note * [`2bf7825`](github/codeql-action@2bf7825) Update default bundle to codeql-bundle-v2.22.4 * [`db69a51`](github/codeql-action@db69a51) Merge pull request [ArcadeData#3049](https://redirect.github.com/github/codeql-action/issues/3049) from github/update-supported-enterprise-server-versions * [`a68d47b`](github/codeql-action@a68d47b) Merge pull request [ArcadeData#3050](https://redirect.github.com/github/codeql-action/issues/3050) from github/henrymercer/init-not-called-config-error * [`e496ff9`](github/codeql-action@e496ff9) Make "init not called" a configuration error * [`fd2ea72`](github/codeql-action@fd2ea72) Update supported GitHub Enterprise Server versions * [`6dee5bc`](github/codeql-action@6dee5bc) Merge pull request [ArcadeData#3045](https://redirect.github.com/github/codeql-action/issues/3045) from github/dependabot/npm\_and\_yarn/npm-5b4171dd16 * Additional commits viewable in [compare view](github/codeql-action@df55935...3c3833e) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
1 participant
upgrade pre-commit hooks