[pre-commit.ci] pre-commit autoupdate (#176)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Branch Vincent <[email protected]>

Author: pre-commit-ci[bot]

.github/workflows/deploy-preview.yaml

@@ -16,13 +16,18 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
+permissions: {}
+
 jobs:
   deploy-preview:
     name: Build & Deploy
     runs-on: ubuntu-latest
     if: |
       (github.event_name == 'pull_request_target' && contains(github.event.pull_request.labels.*.name, 'safe'))
       || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)
+    permissions:
+      deployments: write
+      pull-requests: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3

.github/workflows/deploy-production.yaml

@@ -8,10 +8,15 @@ on:
       - main
   workflow_dispatch: {}
 
+permissions: {}
+
 jobs:
   deploy-preview:
     name: Build & Deploy
     runs-on: ubuntu-latest
+    permissions:
+      deployments: write
+      pull-requests: write
 
     steps:
       - name: Checkout

.pre-commit-config.yaml

@@ -19,7 +19,7 @@ repos:
       - id: check-docstring-first
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.6
+    rev: v0.9.5
     hooks:
       - id: ruff
       - id: ruff-format
@@ -29,10 +29,10 @@ repos:
     hooks:
       - id: prettier
         additional_dependencies:
-          - prettier@3.0.3
+          - prettier@3.3.3
           - [email protected]
 
   - repo: https://github.com/woodruffw/zizmor-pre-commit
-    rev: v1.0.0
+    rev: v1.3.0
     hooks:
       - id: zizmor