chore(deps): bump the pre-commit group across 1 directory with 2 updates

[dependabot]

Bumps the pre-commit group with 2 updates in the / directory: https://github.com/python-jsonschema/check-jsonschema and https://github.com/zizmorcore/zizmor-pre-commit.

Updates https://github.com/python-jsonschema/check-jsonschema from 0.38.0 to 0.38.2

Release notes

Sourced from https://github.com/python-jsonschema/check-jsonschema's releases.

0.38.2

• Update the version of click declared as a dependency

0.38.1

• Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
• check-jsonschema now has a logo. Thanks to Mylah Birdie!

Changelog

Sourced from https://github.com/python-jsonschema/check-jsonschema's changelog.

0.38.2

• Update the version of click declared as a dependency

0.38.1

• Update vendored schemas: bitbucket-pipelines, buildkite, changie, circle-ci, compose-spec, dependabot, github-actions, github-workflows, gitlab-ci, mergify, renovate, taskfile, travis, woodpecker-ci (2026-09-20)
• check-jsonschema now has a logo. Thanks to Mylah Birdie <https://www.instagram.com/mylahbirdie>__!

Commits

• 0494aa7 Bump version for release
• 9ef41c1 Merge pull request #720 from sirosen/update-click-deps
• 91e96dc Update bounds on click
• 99f2dd3 Bump version for release
• 7bae1f5 Add logo to readme
• 44420b0 Merge pull request #718 from sirosen/use-logo
• cfed2c5 Add the new logo!
• c538a21 Merge pull request #717 from python-jsonschema/vendor-schemas-auto
• e594040 [vendor-schemas] automated update
• 27796f7 Merge pull request #709 from python-jsonschema/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates https://github.com/zizmorcore/zizmor-pre-commit from v1.29.0 to 1.30.1

Release notes

Sourced from https://github.com/zizmorcore/zizmor-pre-commit's releases.

v1.30.1

Sponsorship is appreciated!

Bug Fixes 🐛🔗

• Fixed a bug where zizmor would crash on pre-commit inputs that reference a GitHub URL with an explicit .git suffix (#2363)

• Fixed a bug where self-repository auto-fixes were incorrectly marked as "safe" instead of "unsafe" (#2373)

v1.30.0

Sponsorship is appreciated!

New Features 🌈🔗

• New audit: self-repository detects usages of the old "workspace-relative" form for local reusable workflows and actions and recommends the new "self-repository" form instead (#2271) Enhancements 🌱🔗

• The impostor-commit audit now supports pre-commit config inputs (#2256)

• The forbidden-uses audit now supports pre-commit config inputs (#2263)

• The adhoc-packages audit now detects more ad-hoc package management patterns, including bundle add and yarn add

  Many thanks to @​connorshea for proposing and implementing this enhancement!

• The archived-uses audit now supports pre-commit config inputs (#2272)

• The ref-confusion audit now supports pre-commit config inputs (#2274)

• The cache-poisoning audit now produces more detailed and more precise diagnostics (#2330)

• The cache-poisoning audit now handles and exposes auto-fixes in a more general manner (#2332)

• zizmor now recognizes sethvargo/ratchet version comments when evaluating ref pinning (#2319)

  Many thanks to @​njgudman for proposing and implementing this enhancement!

• The unpinned-tools audit now produces more detailed and more precise diagnostics (#2339)

• The unpinned-tools audit now detects usages of extractions/setup-just (#2339)

• The unpinned-tools audit now detects usages of extractions/setup-crate (#2340)

• The archived-uses audit now detects several more archived repositories (#2340)

• The ref-version-mismatch audit now supports uses: that reference reusable workflows (#2344)

• The stale-action-refs audit now supports uses: that reference reusable workflows (#2345)

Bug Fixes 🐛🔗

... (truncated)

Commits

• fa41207 Mirror: 1.30.1
• 7361a0b fix: include pre-commit files in hook (#59)
• 34c5ce3 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the github-actions group...
• cef8b83 Mirror: 1.30.0
• 2e74fc1 Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group (#61)
• 7bb2343 Bump zizmorcore/zizmor-action in the github-actions group (#58)
• 950796f chore: replace pre-commit checks with zizmor-action (#57)
• a5dde09 chore: freeze pin commit hooks, bump usage of own hook (#56)
• a21d6cd Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 in the github-actions group (#55)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[aviator-app]

Current Aviator status

Aviator will automatically update this comment as the status of the PR changes.
Comment /aviator refresh to force Aviator to re-examine your PR (or learn about other /aviator commands).

This pull request is currently open (not queued).

How to merge

To merge this PR, comment /aviator merge or add the mergequeue label.

---

See the real-time status of this PR on the Aviator webapp.

Use the Aviator Chrome Extension to see the status of your PR within GitHub.

[aviator-app]

🔃 FlexReview Status

Common Owner: aviator-co/engineering (expert-load-balance assignment)
Owner and Assignment:

• 🔒 aviator-co/engineering (expert-load-balance assignment)
  • Slack: #fr-eng-notifications
  • Assigned: simsinght
  Owned Files

  • 🔒 .pre-commit-config.yaml

Review SLO: 7 business hours if PR size is <= 200 LOC for the first response.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: b66efd6e-7703-480b-9fca-b657a3705dfc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}