Repository navigation
Conversation
Bumps [https://github.com/zizmorcore/zizmor-pre-commit](https://github.com/zizmorcore/zizmor-pre-commit) from v1.30.1 to 1.31.1. This release includes the previously tagged commit. - [Release notes](https://github.com/zizmorcore/zizmor-pre-commit/releases) - [Commits](zizmorcore/zizmor-pre-commit@fa41207...c92afdf) --- updated-dependencies: - dependency-name: https://github.com/zizmorcore/zizmor-pre-commit dependency-version: 1.31.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![pullfrog[bot]](https://avatars.githubusercontent.com/in/1768019?s=60&v=4){kind=small}
There was a problem hiding this comment.
ℹ️ No critical issues — the pin is correct; one consistency note on the zizmor version across configs.
Reviewed changes
Reviewed the single Dependabot change in this run.
specialzizmor pin —templates/pre-commit/special/.pre-commit-config.yamlmoveszizmorcore/zizmor-pre-commitfromv1.30.1tov1.31.1. The newrevc92afdf2c6ca336aaa8f39e2bd8d48f62dbd8e1fmatches therefs/tags/v1.31.1commit on GitHub, and the# frozen: v1.31.1comment keeps the format the tests enforce.
ℹ️ Nitpick: zizmor pin now differs across configs
The other seven pins stay at v1.30.1 (shell, bun-web, homebrew, python, rust, content, zig), as does edbfi-ci's own .pre-commit-config.yaml. Dependabot raises one PR per stack dir, so this drift is expected and should clear as the sibling PRs land. design/prek.md Parameters still says zizmor 1.30.1 ([V, 2026-10-08]), which stays true for those configs. When the last sibling merges, that line should be bumped to 1.31.1 with a fresh [V, date]. prek-A2 (zizmor accepting queue and the actionlint ignore text) is not re-checked by this bump. I did not run zizmor 1.31.x against the repo's workflows, and no test asserts the tool version.
claude-sonnet-5-5 ｜ 𝕏
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps https://github.com/zizmorcore/zizmor-pre-commit from v1.30.1 to 1.31.1. This release includes the previously tagged commit.
Release notes
Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.
Commits
c92afdfMirror: 1.31.1d25b2b1Mirror: 1.31.004df6d7chore: drop Python 3.10 support (EOL) (#65)fe0957cBump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the github-actions group (#64)de807daBump the github-actions group with 2 updates (#63)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)