Merge pull request #2244 from larrybradley/pre-commit-autoupdate

pre-commit autoupdate

Author: larrybradley

.github/zizmor.yml

@@ -0,0 +1,8 @@
+rules:
+  secrets-outside-env:
+    ignore:
+      # CODECOV_TOKEN is a low-risk CI-only token; no GitHub Environment is
+      # needed. This rule will be demoted to --persona=auditor only in
+      # zizmor v1.24.0, at which point this ignore block can be removed.
+      - ci_cron_daily.yml:76
+      - ci_tests.yml:144

.pre-commit-config.yaml

@@ -55,7 +55,7 @@ repos:
         # Enforce that all noqa annotations always occur with specific codes.
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: "v0.15.6"
+    rev: "v0.15.8"
     hooks:
       - id: ruff-check
         args: ["--fix", "--show-fixes"]
@@ -107,7 +107,7 @@ repos:
   #       exclude: "extern/"
 
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.22.0
+    rev: v1.23.1
     hooks:
     - id: zizmor