Skip to content

Bump pre-commit from 4.2.0 to 4.3.0#594

Merged
JSv4 merged 1 commit intomainfrom
dependabot/pip/pre-commit-4.3.0
Dec 27, 2025
Merged

Bump pre-commit from 4.2.0 to 4.3.0#594
JSv4 merged 1 commit intomainfrom
dependabot/pip/pre-commit-4.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 28, 2025

Bumps pre-commit from 4.2.0 to 4.3.0.

Release notes

Sourced from pre-commit's releases.

pre-commit v4.3.0

Features

Changelog

Sourced from pre-commit's changelog.

4.3.0 - 2025-08-09

Features

Commits
  • b74a22d v4.3.0
  • cc899de Merge pull request #3507 from bc-lee/dart-fix
  • 2a0bcea Downgrade Dart SDK version installed in the CI
  • f1cc7a4 Make Dart pre-commit hook compatible with the latest Dart SDKs
  • 72a3b71 Merge pull request #3504 from pre-commit/pre-commit-ci-update-config
  • c8925a4 [pre-commit.ci] pre-commit autoupdate
  • a5fe6c5 Merge pull request #3496 from ericphanson/eph/jl-startup
  • 6f1f433 Julia language: skip startup.jl file
  • c681721 Merge pull request #3499 from pre-commit/pre-commit-ci-update-config
  • 4fd4537 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 28, 2025
@JSv4 JSv4 force-pushed the main branch 4 times, most recently from 425c157 to 492ea23 Compare November 6, 2025 05:22
@JSv4
Copy link
Copy Markdown
Collaborator

JSv4 commented Dec 7, 2025

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/pip/pre-commit-4.3.0 branch from ffbbb60 to 325b08a Compare December 7, 2025 05:07
@JSv4
Copy link
Copy Markdown
Collaborator

JSv4 commented Dec 27, 2025

@dependabot rebase

Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pre-commit-4.3.0 branch from 325b08a to 269f1a7 Compare December 27, 2025 04:31
@claude
Copy link
Copy Markdown

claude Bot commented Dec 27, 2025

PR Review: pre-commit 4.2.0 → 4.5.1

Summary

LGTM - This is a straightforward dependency update from Dependabot.

Analysis

What's Being Updated:

  • Package: pre-commit
  • Current: 4.2.0
  • New: 4.5.1 (Note: PR title says 4.3.0, but diff shows 4.5.1)
  • File: requirements/local.txt:34

Key Changes in pre-commit 4.2.0 → 4.5.1:

  • Rootless docker detection for language: docker hooks
  • Julia language improvements (skip startup.jl)
  • Dart language compatibility updates
  • Various bug fixes and stability improvements

Code Quality ✅

  • Single-line change to a pinned dependency version
  • No breaking changes - pre-commit maintains backward compatibility
  • Current hooks compatible - Reviewed .pre-commit-config.yaml - all hooks use explicit revisions and will continue working

Testing ✅

  • All CI checks passing:
    • ✅ linter: SUCCESS
    • ✅ pytest: SUCCESS
    • ✅ CodeQL: NEUTRAL
  • No test changes needed - this only affects development tooling

Security ✅

  • No known security vulnerabilities in either version
  • pre-commit is a dev-only dependency (not in production)
  • Updates include stability improvements

Performance ✅

  • No performance impact expected
  • pre-commit hooks run the same regardless of version

Recommendations

  1. Merge with confidence - This is a safe, routine dependency update
  2. Run pre-commit hooks after merge to ensure everything works:
    pre-commit run --all-files
  3. Note for CHANGELOG.md: This is a dev dependency update and does not require a changelog entry per project conventions

Minor Note

The PR title mentions "4.3.0" but the actual diff updates to "4.5.1". This is likely because Dependabot rebased and picked up the latest version. The change is still valid and safe.


Verdict: ✅ Approved - Safe to merge

@JSv4 JSv4 merged commit bb1459c into main Dec 27, 2025
4 of 5 checks passed
@JSv4 JSv4 deleted the dependabot/pip/pre-commit-4.3.0 branch December 27, 2025 06:32
JSv4 added a commit that referenced this pull request Apr 29, 2026
…mit-4.3.0

Bump pre-commit from 4.2.0 to 4.3.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant