From 34952f97506dd403a924995d8198ed7e3cb9e535 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 20 Jul 2026 05:29:21 +0000
Subject: [PATCH] ci: update pinned tool versions

---
 prek.toml                                 | 10 +++++-----
 tools/github-workflow-tools/versions.json |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/prek.toml b/prek.toml
index d7c4dcb..0414fa2 100644
--- a/prek.toml
+++ b/prek.toml
@@ -2,12 +2,12 @@
 # See https://prek.j178.dev for more information.
 #:schema https://www.schemastore.org/prek.json
 
-minimum_prek_version = "0.4.3"
+minimum_prek_version = "0.4.4"
 default_install_hook_types = ["pre-commit", "pre-push"]
 
 [[repos]]
 repo = "https://github.com/zizmorcore/zizmor-pre-commit"
-rev = "e3eebf65325ccc992422292cb7a4baee967cf815" # frozen: v1.26.1
+rev = "64a97fb7fa63188393d3215c6e312f5f9c6d0f78" # frozen: v1.27.0
 hooks = [
   { id = "zizmor" },
 ]
@@ -34,7 +34,7 @@ hooks = [
 
 [[repos]]
 repo = "https://github.com/astral-sh/ruff-pre-commit"
-rev = "c59bba8fb259db0fec2bbb77ad8ba51ea7341b56" # frozen: v0.15.20
+rev = "2700fd5671c633760d912769c041bfcde2b9a01b" # frozen: v0.15.22
 hooks = [
   { id = "ruff", args = ["--fix"], files = '^\.github/scripts/.*\.py$' },
   { id = "ruff-format", files = '^\.github/scripts/.*\.py$' },
@@ -42,7 +42,7 @@ hooks = [
 
 [[repos]]
 repo = "https://github.com/igorshubovych/markdownlint-cli"
-rev = "a4d5d37e66ebcd6b3705204a1d6dbb56dea66338" # frozen: v0.49.0
+rev = "5b5dddc4fb0f83c3ea1fc5616fa63e115dce83e0" # frozen: v0.49.1
 hooks = [
   { id = "markdownlint", args = ["--fix"] },
 ]
@@ -77,7 +77,7 @@ hooks = [
 
 [[repos]]
 repo = "https://github.com/trufflesecurity/trufflehog"
-rev = "00155c9dc586f34d189adc83d3ac2698c2ec551f" # frozen: v3.95.8
+rev = "27b0417c16317ca9a472a9a8092acce143b49c55" # frozen: v3.95.9
 hooks = [
   { id = "trufflehog", stages = ["manual"] },
 ]
diff --git a/tools/github-workflow-tools/versions.json b/tools/github-workflow-tools/versions.json
index c319ed0..4469fb7 100644
--- a/tools/github-workflow-tools/versions.json
+++ b/tools/github-workflow-tools/versions.json
@@ -2,5 +2,5 @@
   "cyclonedx_cli": "v0.32.0",
   "opengrep": "v1.25.0",
   "poutine": "1.1.6",
-  "trufflehog": "3.95.8"
+  "trufflehog": "3.95.9"
 }