Skip to content

Bump prek from 0.3.8 to 0.3.10#218

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/prek-0.3.10
Open

Bump prek from 0.3.8 to 0.3.10#218
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/prek-0.3.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps prek from 0.3.8 to 0.3.10.

Release notes

Sourced from prek's releases.

0.3.10

Release Notes

Released on 2026-04-21.

Enhancements

  • Disallow rev for non-remote repos in schema (#1964)
  • Hide up-to-date output in non-verbose mode (#1942)
  • Improve merge conflict marker detection (#1937)
  • Keep finished hooks visible (#1967)
  • Preserve frozen comment spacing in auto-update (#1945)
  • Reimplement @j178/prek npm package (#1973)

Bug fixes

  • Prefer stable Rust toolchains (#1974)

Documentation

  • Add SKILL.md for prek (#1950)
  • Document gh skill install j178/prek prek to install prek skill for agents (#1951)
  • Improve compatibility and migration docs (#1940)

Other changes

  • Sync latest identify tags (#1947)

Contributors

Install prek 0.3.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.3.10/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.3.10/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.10

Released on 2026-04-21.

Enhancements

  • Disallow rev for non-remote repos in schema (#1964)
  • Hide up-to-date output in non-verbose mode (#1942)
  • Improve merge conflict marker detection (#1937)
  • Keep finished hooks visible (#1967)
  • Preserve frozen comment spacing in auto-update (#1945)
  • Reimplement @j178/prek npm package (#1973)

Bug fixes

  • Prefer stable Rust toolchains (#1974)

Documentation

  • Add SKILL.md for prek (#1950)
  • Document gh skill install j178/prek prek to install prek skill for agents (#1951)
  • Improve compatibility and migration docs (#1940)

Other changes

  • Sync latest identify tags (#1947)

Contributors

0.3.9

Released on 2026-04-13.

Highlight

prek auto-update is now stricter about pinned revisions and more useful in CI. It now keeps rev and # frozen: comments in sync, can detect impostor commits when validating pinned SHAs, and lets you use prek auto-update --check to fail on both available updates and frozen-ref mismatches without rewriting the config.

Examples:

$ prek auto-update
# updates revs and repairs stale `# frozen:` comments
</tr></table> 

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [prek](https://github.com/j178/prek) from 0.3.8 to 0.3.10.
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.8...v0.3.10)

---
updated-dependencies:
- dependency-name: prek
  dependency-version: 0.3.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 1, 2026
@rtibbles rtibbles requested a review from rtibblesbot May 1, 2026 00:35
Copy link
Copy Markdown
Contributor

@rtibblesbot rtibblesbot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Routine patch update; safe to merge.

CI: Python unit tests all passing. Linting check failed due to rebuild-from-specs modifying js/package.json (version 0.2.17 → 0.2.18) — pre-existing mismatch unrelated to this bump.

Dependency Update Review

Package: prek 0.3.8 → 0.3.10 (spans two patch releases, 0.3.9 + 0.3.10)
Semver risk: Patch
Dependency type: Dev (listed under [dependency-groups] dev in pyproject.toml; not a production runtime dependency)
CI status: Tests passing; lint failing for an unrelated pre-existing reason (see above)

Changelog Analysis

Sources consulted:

  • PR body (includes release notes and changelog for 0.3.9 and 0.3.10)

Breaking changes: None found in either release.

Other notable changes:

  • 0.3.10: Improve merge conflict marker detection, hide up-to-date output in non-verbose mode, preserve frozen comment spacing in auto-update, prefer stable Rust toolchains (bug fix)
  • 0.3.9: prek auto-update stricter about pinned revisions; can detect impostor commits; --check flag can fail on frozen-ref mismatches

Compatibility Assessment

  • Project uses prek only as a pre-commit hook runner (dev tooling); no prek API surface is called from application code
  • No peer dependency changes
  • No code changes required
  • uv.lock also updates exclude-newer from a pinned timestamp to 0001-01-01T00:00:00Z with a backwards-compatibility comment; this is driven by exclude-newer-span = "P7D" in pyproject.toml and is expected lockfile behavior

Recommendation

APPROVE — patch bump of a dev-only tool, no breaking changes, all tests green.


@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Reviewed the pull request diff checking for:

  • Correctness: bugs, edge cases, undocumented behavior, resource leaks, hardcoded values
  • Design: unnecessary complexity, naming, readability, comment accuracy, redundant state
  • Architecture: duplicated concerns, minimal interfaces, composition over inheritance
  • Testing: behavior-based assertions, mocks only at hard boundaries, accurate coverage
  • Completeness: missing dependencies, unupdated usages, i18n, accessibility, security
  • Principles: DRY (same reason to change), SRP, Rule of Three (no premature abstraction)
  • Checked CI status and linked issue acceptance criteria
  • For UI changes: inspected screenshots for layout, visual completeness, and consistency

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant