From 72078dde3240f75b7b3e76e8af772e14410321c4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 7 Aug 2026 17:10:38 +0000
Subject: [PATCH 1/2] Initial plan


From 6f91e8500e7f25d3b2f03452bd4594896fa8eb25 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 7 Aug 2026 17:14:18 +0000
Subject: [PATCH 2/2] ci(release): install pre-commit hooks before verify tests

---
 .github/workflows/release.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f8febc8..56506ba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,6 +28,10 @@ jobs:
         run: |
           python -m pip install --upgrade pip setuptools wheel
           python -m pip install -e ".[dev]" -c versions.lock
+      - name: Install pre-commit hooks (gitleaks binary)
+        run: |
+          pre-commit install
+          pre-commit install-hooks
       # Separate steps on purpose: a combined step only reports "something
       # failed", and job logs need admin rights to read. One tool per step makes
       # the failure identifiable from the run summary alone.