ci(pre-commit): Update pre-commit hooks and add useful new ones

Author: Holzhaus

.pre-commit-config.yaml

@@ -1,27 +1,54 @@
+---
 default_language_version:
-  python: python3
+    python: python3
 repos:
-- repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v5.0.0
-  hooks:
-  - id: fix-byte-order-marker
-  - id: check-case-conflict
-  - id: check-json
-  - id: check-merge-conflict
-  - id: check-xml
-  - id: check-yaml
-  - id: end-of-file-fixer
-  - id: mixed-line-ending
-  - id: trailing-whitespace
-- repo: https://github.com/codespell-project/codespell
-  rev: v2.3.0
-  hooks:
-  - id: codespell
-    args: [ --ignore-words=.codespellignore ]
-- repo: https://github.com/doublify/pre-commit-rust
-  rev: v1.0
-  hooks:
-  - id: fmt
-  - id: cargo-check
-  - id: clippy
-    args: [--all-targets, --all-features, --, -D, warnings]
+    - repo: https://github.com/pre-commit/pre-commit-hooks
+      rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c  # frozen: v6.0.0
+      hooks:
+          - id: check-case-conflict
+          - id: check-json
+          - id: check-merge-conflict
+          - id: check-symlinks
+          - id: check-toml
+          - id: check-xml
+          - id: check-yaml
+          - id: destroyed-symlinks
+          - id: detect-private-key
+          - id: end-of-file-fixer
+          - id: fix-byte-order-marker
+          - id: forbid-new-submodules
+          - id: mixed-line-ending
+          - id: trailing-whitespace
+            exclude: .tsv$
+    - repo: https://github.com/codespell-project/codespell
+      rev: 63c8f8312b7559622c0d82815639671ae42132ac  # frozen: v2.4.1
+      hooks:
+          - id: codespell
+            args: [--ignore-words=.codespellignore]
+            exclude_types: [tsv, json]
+    - repo: https://github.com/jumanjihouse/pre-commit-hook-yamlfmt
+      rev: 8d1b9cadaf854cb25bb0b0f5870e1cc66a083d6b  # frozen: 0.2.3
+      hooks:
+          - id: yamlfmt
+    - repo: https://github.com/gitleaks/gitleaks
+      rev: 39fdb480a06768cc41a84ef86959c07ff33091c4  # frozen: v8.28.0
+      hooks:
+          - id: gitleaks
+    - repo: https://github.com/woodruffw/zizmor-pre-commit
+      rev: 122d24ec728f140b38330ae8b04e3c5fe8b774c5  # frozen: v1.15.2
+      hooks:
+          - id: zizmor
+    - repo: https://github.com/doublify/pre-commit-rust
+      rev: eeee35a89e69d5772bdee97db1a6a898467b686e  # frozen: v1.0
+      hooks:
+          - id: fmt
+            args: [--all, --]
+          - id: clippy
+            args: [--locked, --workspace, --all-features, --all-targets, --, -D, warnings]
+    - repo: https://github.com/Holzhaus/sourceheaders
+      rev: 37fab20a62cc63ebb9a8855a2ab90ec7dc56cadf  # frozen: v0.0.4
+      hooks:
+          - id: sourceheaders
+
+ci:
+    skip: [fmt, clippy]

.sourceheaders.toml

@@ -0,0 +1,5 @@
+[general]
+license = "MPL-2.0"
+copyright_holder = "Jan Holthuis <jan.holthuis@rub.de>"
+prefer_inline = true
+width = 99