Ensure pre-commit hooks are kept up-to-date (#3887)

Author: doriable

make/buf/all.mk

@@ -190,6 +190,7 @@ endif
 	$(SED_I) "s/golang:1\.[0-9][0-9]*/golang:$(GOVERSION)/g" $(shell git-ls-files-unstaged | grep Dockerfile)
 	$(SED_I) "s/golang:1\.[0-9][0-9]*/golang:$(GOVERSION)/g" $(shell git-ls-files-unstaged | grep \.mk$)
 	$(SED_I) "s/go-version: '1\.[0-9][0-9].x'/go-version: '$(GOVERSION).x'/g" $(shell git-ls-files-unstaged | grep \.github\/workflows | grep -v previous.yaml)
+	$(MAKE) checkandupdateprecommithooks
 
 .PHONY: bufimageutilupdateexpectations
 bufimageutilupdateexpectations:
@@ -203,3 +204,9 @@ newtodos:
 .PHONY: newtodofiles
 newtodofiles:
 	@bash make/buf/scripts/newtodos.bash | grep -v FUTURE | cut -f 1 -d : | sort | uniq
+
+.PHONY: checkandupdateprecommithooks
+checkandupdateprecommithooks:
+	@bash make/buf/scripts/checkandupdateprecommithooks.bash
+
+postupgrade:: checkandupdateprecommithooks

make/buf/scripts/checkandupdateprecommithooks.bash

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+set -eo pipefail
+
+DIR="$(CDPATH= cd "$(dirname "${0}")/../../.." && pwd)"
+cd "${DIR}"
+
+GO_VERSION=$(grep '^go ' go.mod | awk '{print $2}')
+# If the version in go.mod does not include the patch version, e.g. go 1.24, for the
+# .pre-commit-hook.yaml configuration, we'll need to add a 0.
+if [[ ! "${GO_VERSION}" =~ '^([0-9]+\.){3}$' ]]; then
+  GO_VERSION="${GO_VERSION}.0"
+fi
+
+function lesser_version() {
+  echo -e "$1\n$2" | sort -V | head -n 1
+}
+
+function update_pre_commit_hooks() {
+  yq .[].language_version=\"${GO_VERSION}\" .pre-commit-hooks.yaml > .pre-commit-hooks.yaml.tmp
+  mv .pre-commit-hooks.yaml.tmp .pre-commit-hooks.yaml
+}
+
+for version in $(yq ".[].language_version" .pre-commit-hooks.yaml)
+do
+  LESSER_VERSION=$(lesser_version "${GO_VERSION}" "${version}")
+  if [ ${version} == "${LESSER_VERSION}" ]; then
+    echo "found lower pre-commit hook version ${version} compared to go.mod version ${GO_VERSION}"
+    update_pre_commit_hooks
+    break
+  fi
+done