Bump the pre-commit-hooks group with 4 updates by dependabot[bot] · Pull Request #3 · leinardi/template-default

dependabot · 2026-02-19T20:05:43Z

Bumps the pre-commit-hooks group with 4 updates: https://github.com/checkmake/checkmake.git, https://github.com/rhysd/actionlint, https://github.com/DavidAnson/markdownlint-cli2 and https://github.com/adrienverge/yamllint.

Updates https://github.com/checkmake/checkmake.git from 0.2.2 to 0.3.2

Release notes

Sourced from https://github.com/checkmake/checkmake.git's releases.

Release v0.3.2

v0.3.2 (10th January 2026)

Changes

o- build: allow specifying a version for the build #235

New Contributors

No new contributors

Full Changelog: checkmake/checkmake@v0.3.1...v0.3.2

Release v0.3.1

v0.3.1 (9th January 2026)

Changes

fix(cli): cleanup --version output #228

New Contributors

muzimuzhi made their first contribution in checkmake/checkmake#228

Full Changelog: checkmake/checkmake@v0.3.0...v0.3.1

Release v0.3.0

v0.3.0 (8th January 2026)

Highlights

Starting ith this release, checkmake is no longer considered experimental.

The container images on docker hub are discontinued ; images are nowpublished on quay.io instead.

In addition to the previously published build assets, an arm64 binary for Linux is now published.

Changes

no longer experimental #151

... (truncated)

Changelog

Sourced from https://github.com/checkmake/checkmake.git's changelog.

Changelog

v0.3.0 (8th January 2026)

no longer experimental

project moved to github.com/checkmake/checkmake organization

CLI rewrite: migrated from docopt to cobra

JSON formatter for CI/tooling integration

rule additions:

uniquetargets

parser improvements: better rule detection, inline recipe parsing, PHONY handling

config-aware list-rules command

global ~/checkmake.ini fallback configuration

configurable minphony rule

platform support: Windows, darwin.arm64, linux.arm64

container images published to quay.io

updated to Go 1.25

Commits

59931d5 docs/releases: add release notes for v0.3.2
0b5f811 build: allow specifying a version for the build
4ea1879 docs: add release notes for v0.3.1
230e7f0 fix(cli): cleanup --version output
0f9ce14 Update v0.3.0.md
f43ade8 build/release: separate creation of releaseartifacts
f8f95fd docs: Update release doc with contributors names
14eae88 golangci-lint: fix preallocate errors reproted with 2.8.0
f268b06 docs: rename v0.3.0 release notes file
b53f2ea docs: update Changelog and add 0.3.0 release info
Additional commits viewable in compare view

Updates https://github.com/rhysd/actionlint from v1.7.9 to 1.7.11

Release notes

Sourced from https://github.com/rhysd/actionlint's releases.

v1.7.11
Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @heppu)
env:
  # ERROR: case() requires an odd number of arguments
  ENVIRONMENT: |-
    ${{ case(
      github.ref == 'refs/heads/main', 'production',
      github.ref == 'refs/heads/staging', 'staging'
    ) }}
Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @hugovk and @muzimuzhi)
Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @takaram)
$ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
$ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
Loaded 1 attestation from GitHub API
The following policy criteria will be enforced:

Predicate type must match:................ https://slsa.dev/provenance/v1
Source Repository Owner URI must match:... https://github.com/rhysd
Source Repository URI must match:......... https://github.com/rhysd/actionlint
Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
OIDC Issuer must match:................... https://token.actions.githubusercontent.com

✓ Verification succeeded!
The following 1 attestation matched the policy criteria

Attestation #1

Build repo:..... rhysd/actionlint
Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
Signer repo:.... rhysd/actionlint
Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
Report path filters with ./ as error because they never match anything. (#521)
on:
  push:
    paths:
      # ERROR: This never matches anything. `foo/bar.txt` is correct.
      - ./foo/bar.txt
Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @michaelgruenewald)

Fix stack overflow crash by a recursive anchor in matrix items. (#610)

Fix an unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)

Reduce the number of memory allocations on resolving anchors.

Update the popular actions data set to the latest.

Update Go dependencies to the latest.

... (truncated)

Changelog

Sourced from https://github.com/rhysd/actionlint's changelog.

v1.7.11 - 2026-02-14
Support the case() function in ${{ }} expressions which was recently added to GitHub Actions. (#612, #614, thanks @heppu)
env:
  # ERROR: case() requires an odd number of arguments
  ENVIRONMENT: |-
    ${{ case(
      github.ref == 'refs/heads/main', 'production',
      github.ref == 'refs/heads/staging', 'staging'
    ) }}
Support new macos-26-large and windows-2025-vs2026 runner labels. See the GitHub's announce for more details. (#615, thanks @hugovk and @muzimuzhi)
Enable Artifact attestations for the released binaries. From v1.7.11 gh command can verify the integrity of the downloaded binaries as follows. The verification is highly recommended in terms of supply chain security. (#608, thanks @takaram)
$ gh release download --repo rhysd/actionlint --pattern '*_darwin_amd64.tar.gz' v1.7.11
$ gh attestation verify --repo rhysd/actionlint actionlint_1.7.11_darwin_amd64.tar.gz
Loaded digest sha256:17ffc17fed8f0258ef6ad4aed932d3272464c7ef7d64e1cb0d65aa97c9752107 for file://actionlint_1.7.11_darwin_amd64.tar.gz
Loaded 1 attestation from GitHub API
The following policy criteria will be enforced:

Predicate type must match:................ https://slsa.dev/provenance/v1
Source Repository Owner URI must match:... https://github.com/rhysd
Source Repository URI must match:......... https://github.com/rhysd/actionlint
Subject Alternative Name must match regex: (?i)^https://github.com/rhysd/actionlint/
OIDC Issuer must match:................... https://token.actions.githubusercontent.com

✓ Verification succeeded!
The following 1 attestation matched the policy criteria

Attestation #1

Build repo:..... rhysd/actionlint
Build workflow:. .github/workflows/release.yaml@refs/tags/v1.7.11
Signer repo:.... rhysd/actionlint
Signer workflow: .github/workflows/release.yaml@refs/tags/v1.7.11
Report path filters with ./ because they never match anything. (#521)
on:
  push:
    paths:
      # ERROR: This never matches anything. `foo/bar.txt` is correct.
      - ./foo/bar.txt
Fix comparing matrix items when an item is a super set of another item. (#523, #613, thanks @michaelgruenewald)

Fix stack overflow crash by a recursive anchor in matrix items. (#610)

Fix a unassigned variable false positive from shellcheck by disabling SC2153 rule. (#573)

Reduce the number of memory allocations on resolving anchors.

Update the popular actions data set to the latest.

... (truncated)

Commits

393031a bump up version to v1.7.11
63589e8 add link to the release note of the version in playground heading
58a2626 remove legacy Homebrew formula
d22c104 fix test script for download script to check error case failures
50d2134 describe how to download and verify artifact using gh (fix #617)
226bb4a update playground npm deps including jsdom v28
1e85edb disable SC2153 shellcheck rule to avoid unassigned variable false positive (f...
8776d64 Merge pull request #619 from takaram/patch-1
e3eb8cb reduce memory allocations on resolving anchors
db08cec Fix variable name in release workflow
Additional commits viewable in compare view

Updates https://github.com/DavidAnson/markdownlint-cli2 from v0.19.1 to 0.21.0

Changelog

Sourced from https://github.com/DavidAnson/markdownlint-cli2's changelog.

0.21.0

Refactor options/configuration file loading

Update dependencies

0.20.0

Update dependencies

Commits

5387279 Update to version 0.21.0.
f981e1e Freshen list of external custom rules included with the markdownlint-cli2-rul...
eb82717 Bump cpy from 13.2.0 to 13.2.1
076392f Bump markdown-it from 14.1.0 to 14.1.1
9370c55 Bump eslint-plugin-unicorn from 62.0.0 to 63.0.0
c9e105d Update indirect playwright dependencies to 1.58.2.
8105a30 Bump @playwright/test from 1.58.1 to 1.58.2
fdff78e Bump @stylistic/eslint-plugin from 5.7.1 to 5.8.0
e8829a5 Bump eslint-plugin-jsdoc from 62.5.2 to 62.5.4
5198b10 Bump eslint-plugin-jsdoc from 62.5.0 to 62.5.2
Additional commits viewable in compare view

Updates https://github.com/adrienverge/yamllint from v1.37.1 to 1.38.0

Changelog

Sourced from https://github.com/adrienverge/yamllint's changelog.

1.38.0 (2026-01-13)

Add support for Python 3.14, drop support for Python 3.9

Require pathspec ≥ 1.0.0

Config: Follow gitignore implementation in yaml-files and ignore

Config: Use "mapping" instead of "dict" for user-facing errors

Rule indentation: Fix error message for check-multi-line-strings

Rule quoted-strings: Add quote-type: consistent

Docs: Update the name of BSD ports

Docs: Enhance wording of recursive directory lint in README

Docs: Add Alpine Linux installation instructions in README

Commits

cba56bc yamllint version 1.38.0
9dc506b Require pathspec ≥ 1.0.0 and follow Git's gitignore implementation
73b9c0b Drop support for Python 3.9
22d07ed indentation: Fix error message for check-multi-line-strings
cfbfe9b README: Add Alpine Linux installation instructions
a3b3bb3 README: Enhance wording of recursive directory lint
e3b72f5 quoted-strings: Add missing quote-type: consistent docs
e3d54cc quoted-strings: Add quote-type: consistent
0b4ddc8 CI: Update GitHub Actions
866f805 build: Remove license-files from pyproject.toml
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

dependabot · 2026-02-19T20:05:44Z

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot requested a review from leinardi as a code owner February 19, 2026 20:05

leinardi approved these changes Feb 19, 2026

View reviewed changes

leinardi merged commit b31303f into main Feb 19, 2026
5 checks passed

leinardi deleted the dependabot/pre_commit/pre-commit-hooks-07acb2b685 branch February 19, 2026 20:10

Navigation Menu

Bump the pre-commit-hooks group with 4 updates - #3

Bump the pre-commit-hooks group with 4 updates#3
leinardi merged 1 commit into
mainfrom
dependabot/pre_commit/pre-commit-hooks-07acb2b685

dependabot Bot commented on behalf of github Feb 19, 2026

Uh oh!

dependabot Bot commented on behalf of github Feb 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Feb 19, 2026

Release v0.3.2

v0.3.2 (10th January 2026)

Changes

New Contributors

Release v0.3.1

v0.3.1 (9th January 2026)

Changes

New Contributors

Release v0.3.0

v0.3.0 (8th January 2026)

Highlights

Changes

Changelog

v0.3.0 (8th January 2026)

v1.7.11

v1.7.11 - 2026-02-14

0.21.0

0.20.0

1.38.0 (2026-01-13)

Uh oh!

dependabot Bot commented on behalf of github Feb 19, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant