Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Python: Bump prek from 0.3.8 to 0.3.9 in /python#5228

Merged
moonbox3 merged 3 commits into
mainfrom
dependabot/pip/python/prek-0.3.9
Apr 28, 2026
Merged

Python: Bump prek from 0.3.8 to 0.3.9 in /python#5228
moonbox3 merged 3 commits into
mainfrom
dependabot/pip/python/prek-0.3.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Copy link
Copy Markdown
Contributor

Bumps prek from 0.3.8 to 0.3.9.

Release notes

Sourced from prek's releases.

0.3.9

Release Notes

Released on 2026-04-13.

Highlight

prek auto-update is now stricter about pinned revisions and more useful in CI. It now keeps rev and # frozen: comments in sync, can detect impostor commits when validating pinned SHAs, and lets you use prek auto-update --check to fail on both available updates and frozen-ref mismatches without rewriting the config.

Examples:

$ prek auto-update
# updates revs and repairs stale `# frozen:` comments
$ prek auto-update --freeze
writes frozen SHAs with matching # frozen: <tag> comments
$ prek auto-update --check
exits non-zero when updates are available, a # frozen: comment is stale,
or a pinned SHA does not belong to the fetched upstream refs

Enhancements

  • Check and sync frozen comments during auto-update (#1896)
  • Handle impostor commits in auto-update (#1919)
  • Add experimental language: dotnet support (#1871)
  • Honor repo and worktree core.hooksPath (#1892)
  • Add prek run --no-fail-fast to override config file (#1859)
  • Add forbid-new-submodules as builtin hook (#1853)
  • Clean stale patch files in cache gc (#1877)
  • Display auto-update results by config entry (#1922)
  • Restrict patch directory permissions (#1876)
  • Show tag names in auto-update --freeze output (#1916)
  • Use a bitset for hook stages (#1860)

Bug fixes

  • Canonicalize CWD and GIT_ROOT paths (#1878)
  • Ensure quotes are added for non-string revisions in auto-update (#1936)

Documentation

  • Update docs for case of hooks modifying files with a non-zero exit code (#1879)

... (truncated)

Changelog

Sourced from prek's changelog.

0.3.9

Released on 2026-04-13.

Highlight

prek auto-update is now stricter about pinned revisions and more useful in CI. It now keeps rev and # frozen: comments in sync, can detect impostor commits when validating pinned SHAs, and lets you use prek auto-update --check to fail on both available updates and frozen-ref mismatches without rewriting the config.

Examples:

$ prek auto-update
# updates revs and repairs stale `# frozen:` comments
$ prek auto-update --freeze
writes frozen SHAs with matching # frozen: <tag> comments
$ prek auto-update --check
exits non-zero when updates are available, a # frozen: comment is stale,
or a pinned SHA does not belong to the fetched upstream refs

Enhancements

  • Check and sync frozen comments during auto-update (#1896)
  • Handle impostor commits in auto-update (#1919)
  • Add experimental language: dotnet support (#1871)
  • Honor repo and worktree core.hooksPath (#1892)
  • Add prek run --no-fail-fast to override config file (#1859)
  • Add forbid-new-submodules as builtin hook (#1853)
  • Clean stale patch files in cache gc (#1877)
  • Display auto-update results by config entry (#1922)
  • Restrict patch directory permissions (#1876)
  • Show tag names in auto-update --freeze output (#1916)
  • Use a bitset for hook stages (#1860)

Bug fixes

  • Canonicalize CWD and GIT_ROOT paths (#1878)
  • Ensure quotes are added for non-string revisions in auto-update (#1936)

Documentation

  • Update docs for case of hooks modifying files with a non-zero exit code (#1879)

Contributors

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump prek from 0.3.8 to 0.3.9 in /python
49926f5 
Bumps [prek](https://github.com/j178/prek) from 0.3.8 to 0.3.9.
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.8...v0.3.9)

---
updated-dependencies:
- dependency-name: prek
  dependency-version: 0.3.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies python Usage: [Issues, PRs], Target: Python labels Apr 13, 2026
@github-actions github-actions Bot changed the title Bump prek from 0.3.8 to 0.3.9 in /python Python: Bump prek from 0.3.8 to 0.3.9 in /python Apr 13, 2026
@moonbox3

moonbox3 commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

@copilot figure out why CI/CD checks are failing

Copilot AI commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

@copilot figure out why CI/CD checks are failing

The failures were caused by a version conflict in the uv workspace: the Dependabot commit bumped prek to 0.3.9 in the root python/pyproject.toml, but python/packages/lab/pyproject.toml still pinned prek==0.3.8. Since both packages share the same workspace, uv couldn't satisfy both constraints simultaneously.

Fixed in db41a14 by:

  1. Bumping prek to 0.3.9 in python/packages/lab/pyproject.toml
  2. Regenerating python/uv.lock to use prek 0.3.9

Copilot AI requested a review from moonbox3 April 13, 2026 22:56
@moonbox3 moonbox3 added the lab label Apr 13, 2026
@moonbox3 moonbox3 enabled auto-merge April 28, 2026 05:24
@moonbox3 moonbox3 added this pull request to the merge queue Apr 28, 2026
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to a conflict with the base branch Apr 28, 2026
@moonbox3

moonbox3 commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

@copilot fix the uv.lock conflict.

Copilot AI commented Apr 28, 2026

Copy link
Copy Markdown
Contributor

@copilot fix the uv.lock conflict.

Resolved in 8060c5ef. The branch was 102 commits behind main, which had added a new agent-framework-hyperlight package — causing a single conflict in python/uv.lock. Merged main into the branch, resolved the conflict, and regenerated uv.lock.

@moonbox3 moonbox3 enabled auto-merge April 28, 2026 08:06
Copilot AI requested a review from moonbox3 April 28, 2026 08:07
@moonbox3 moonbox3 added this pull request to the merge queue Apr 28, 2026
Merged via the queue into main with commit 74a5ea8 Apr 28, 2026
44 checks passed
This was referenced Jun 4, 2026
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
This was referenced Jun 11, 2026
Open
Open
Closed
Closed
Closed
This was referenced Jun 17, 2026
Closed
Closed
Closed
This was referenced Jun 24, 2026
Closed
Open
Closed
Closed
Open
This was referenced Jul 1, 2026
Open
Closed
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eavanvalkenburg eavanvalkenburg eavanvalkenburg approved these changes
@SergeyMenshykh SergeyMenshykh SergeyMenshykh approved these changes
@moonbox3 moonbox3 Awaiting requested review from moonbox3

Assignees

No one assigned

Labels

python Usage: [Issues, PRs], Target: Python

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@moonbox3 @eavanvalkenburg @SergeyMenshykh