chore(deps): update dependency pre-commit to v4

[descope]

This PR contains the following updates:

Package	Type	Update	Change	Pending	OpenSSF
pre-commit	dependency-groups	major	==3.8.0 -> ==4.5.1	4.6.0

---

Release Notes

pre-commit/pre-commit (pre-commit)

v4.5.1

Compare Source

==================

Fixes

• Fix language: python with repo: local without additional_dependencies.
  • #​3597 PR by @​asottile.

v4.5.0

Compare Source

==================

Features

• Add pre-commit hazmat.
  • #​3585 PR by @​asottile.

v4.4.0

Compare Source

==================

Features

• Add --fail-fast option to pre-commit run.
  • #​3528 PR by @​JulianMaurin.
• Upgrade ruby-build / rbenv.
  • #​3566 PR by @​asottile.
  • #​3565 issue by @​MRigal.
• Add language: unsupported / language: unsupported_script as aliases
  for language: system / language: script (which will eventually be
  deprecated).
  • #​3577 PR by @​asottile.
• Add support docker-in-docker detection for cgroups v2.
  • #​3535 PR by @​br-rhrbacek.
  • #​3360 issue by @​JasonAlt.

Fixes

• Handle when docker gives SecurityOptions: null.
  • #​3537 PR by @​asottile.
  • #​3514 issue by @​jenstroeger.
• Fix error context for invalid stages in .pre-commit-config.yaml.
  • #​3576 PR by @​asottile.

v4.3.0

Compare Source

==================

Features

• language: docker / language: docker_image: detect rootless docker.
  • #​3446 PR by @​matthewhughes934.
  • #​1243 issue by @​dkolepp.
• language: julia: avoid startup.jl when executing hooks.
  • #​3496 PR by @​ericphanson.
• language: dart: support latest dart versions which require a higher sdk
  lower bound.
  • #​3507 PR by @​bc-lee.

v4.2.0

Compare Source

==================

Features

• For language: python first attempt a versioned python executable for
  the default language version before consulting a potentially unversioned
  sys.executable.
  • #​3430 PR by @​asottile.

Fixes

• Handle error during conflict detection when a file is named "HEAD"
  • #​3425 PR by @​tusharsadhwani.

v4.1.0

Compare Source

==================

Features

• Add language: julia.
  • #​3348 PR by @​fredrikekre.
  • #​2689 issue @​jmuchovej.

Fixes

• Disable automatic toolchain switching for language: golang.
  • #​3304 PR by @​AleksaC.
  • #​3300 issue by @​AleksaC.
  • #​3149 issue by @​nijel.
• Fix language: r installation when initiated by RStudio.
  • #​3389 PR by @​lorenzwalthert.
  • #​3385 issue by @​lorenzwalthert.

v4.0.1

Compare Source

==================

Fixes

• Fix pre-commit migrate-config for unquoted deprecated stages names with
  purelib pyyaml.
  • #​3324 PR by @​asottile.
  • pre-commit-ci/issues#234 issue by @​lorenzwalthert.

v4.0.0

Compare Source

==================

Features

• Improve pre-commit migrate-config to handle more yaml formats.
  • #​3301 PR by @​asottile.
• Handle stages deprecation in pre-commit migrate-config.
  • #​3302 PR by @​asottile.
  • #​2732 issue by @​asottile.
• Upgrade ruby-build.
  • #​3199 PR by @​ThisGuyCodes.
• Add "sensible regex" warnings to repo: meta.
  • #​3311 PR by @​asottile.
• Add warnings for deprecated stages (commit -> pre-commit, push ->
  pre-push, merge-commit -> pre-merge-commit).
  • #​3312 PR by @​asottile.
  • #​3313 PR by @​asottile.
  • #​3315 PR by @​asottile.
  • #​2732 issue by @​asottile.

Updating

• language: python_venv has been removed -- use language: python instead.
  • #​3320 PR by @​asottile.
  • #​2734 issue by @​asottile.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[descope]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: uv.lock

Command failed: uv lock --upgrade-package pre-commit
Using CPython 3.14.4 interpreter at: /opt/containerbase/tools/python/3.14.4/bin/python3
  × No solution found when resolving dependencies for split (markers:
  │ python_full_version == '3.9.*'):
  ╰─▶ Because the requested Python version (>=3.9, <4.0) does not satisfy
      Python>=3.10 and pre-commit==4.5.1 depends on Python>=3.10, we can
      conclude that pre-commit==4.5.1 cannot be used.
      And because descope:dev depends on pre-commit==4.5.1 and your project
      requires descope:dev, we can conclude that your project's requirements
      are unsatisfiable.

      hint: While the active Python version is 3.14, the resolution failed for
      other Python versions supported by your project. Consider limiting your
      project's supported Python versions using `requires-python`.

      hint: The `requires-python` value (>=3.9, <4.0) includes Python versions
      that are not supported by your dependencies (e.g., pre-commit==4.5.1
      only supports >=3.10). Consider using a more restrictive
      `requires-python` value (like >=3.10).

[descope]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 4.x releases. But if you manually upgrade to 4.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.