Update dependency prek to v0.5.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
prek	tools	minor	0.4.8 → 0.5.3

---

Release Notes

j178/prek (prek)

v0.5.3

Compare Source

Released on 2026-09-13.

Enhancements

• Add PEP 740 attestations for PyPI releases (#​2705)
• Add a check-jsonc builtin hook (#​2682)
• Allow disabling automatic uv installation (#​2702)

Bug fixes

• Fix Julia additional dependency specifiers (#​2703)
• Update granit-parser to fix YAML flow indentation (#​2707)

Contributors

• @​clbarnes
• @​j178
• @​tisonkun

v0.5.2

Compare Source

Released on 2026-09-03.

Enhancements

• Allow unknown tags by default in check-yaml (#​2678)

Contributors

• @​j178

v0.5.1

Compare Source

Released on 2026-09-01.

Enhancements

• Add --hide-status <passed|failed|skipped> for hook reports (#​2644)
• Add prek init for repository setup (#​2636)
• Apply hook env during environment creation (#​2650)
• Disable error snippets in check-yaml diagnostics (#​2664)
• Show hooks excluded by skip selectors (#​2645)
• Support Pixi for Conda environments (#​2667)
• Support cargo-binstall for Rust CLI dependencies (#​2658)
• Warn about unused keys in user settings (#​2665)

Bug fixes

• Reject unsupported YAML tags in check-yaml (#​2656)

Documentation

• Clarify local hook documentation (#​2640)
• Clarify pre-commit command compatibility (#​2635)
• Document automatic PR fixes with autofix.ci (#​2643)
• Document check-yaml unsafe support (#​2632)
• Improve setup and workflow documentation (#​2637)

Other changes

• Drop low-usage release targets (#​2651)
• Generate a prek manifest JSON schema (#​2648)

Contributors

• @​j178

v0.5.0

Compare Source

Released on 2026-08-27.

Highlights

Choose where hook toolchains come from

language_version now accepts a source preference alongside the version
request, letting you control where prek looks for a compatible toolchain when
it creates a hook environment. Use managed (the default) or system to choose
which source prek tries first while still allowing fallback and downloads. Use
only-managed or only-system to require one source.

For example, this local Ruff hook requires a Python 3.12 toolchain managed by
prek:

repos:
  - repo: local
    hooks:
      - id: ruff
        name: ruff
        language: python
        entry: ruff check
        additional_dependencies: [ruff]
        language_version:
          request: "3.12"
          preference: only-managed

With only-managed, prek reuses a compatible toolchain from its managed store
or downloads one when needed. It never falls back to Python from PATH, an OS
package manager, or a version manager, so toolchain selection does not depend on
the developer or CI machine's external environment.

Existing scalar values such as language_version: "3.12" continue to work. See
toolchain management and language_version
for the full source-selection behavior. (#​2613)

Breaking changes

The breaking changes in this release are mostly small cleanups, and most users should not be affected.

• Group names can no longer start with @. This prefix is now reserved for special group selectors such as the new @ungrouped selector. (#​2617)
• PREK_MAX_CONCURRENCY has been removed. Use PREK_CONCURRENT_HOOKS and PREK_CONCURRENT_BATCHES to control hook and per-hook batch concurrency separately. (#​2620)
• The top-level prek init-template-dir command has been removed. Use prek util init-template-dir, or prek init-templatedir for drop-in compatibility with pre-commit. (#​2623)
• prek auto-update has been removed. Use prek update, or prek autoupdate for drop-in compatibility with pre-commit. (#​2619)

Enhancements

• Add configurable toolchain source preferences (#​2613)
• Allow explicit language: python to opt out of fast-path hooks (#​2608)
• Group run and update options in CLI help (#​2629)
• Preserve terminal theme contrast for status labels (#​2592)
• Add @ungrouped group selector (#​2617)
• Retry uv installation with static musl binary (#​2600)
• Support {hook_repo} placeholder in hook entry (#​2602)

Bug fixes

• Expose the git work tree to hooks running outside the git root (#​2579)
• Isolate local hook environment installation (#​2615)
• Preserve hook config deserialization error locations (#​2573)
• Resolve hook log files from their config directory (#​2580)
• Track explicit config paths as absolute paths (#​2574)

Documentation

• Document prek run architecture (#​2630)
• Publish versioned documentation (#​2626)

Contributors

• @​jeromeheissler
• @​gurgeous
• @​j178

v0.4.14

Compare Source

Released on 2026-08-17.

Enhancements

• Support check-yaml unsafe mode (#​2546)

Performance

• Reuse allocations in common filters (#​2548)

Bug fixes

• Accept non-finite floats in check-yaml (#​2545)
• Allow comment-heavy YAML in check-yaml (#​2554)
• Sanitize captured terminal output before replay (#​2552)

Contributors

• @​j178

v0.4.13

Compare Source

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using
mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured
hook's prepared environment. For example, the hook above makes its managed
binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#​2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#​2488)
• Add prek exec for running commands in a hook environment (#​2478)
• Add yaml-language-server: comment to YAML sample config (#​2486)
• Make prek cache size output terminal-aware (#​2508)
• Match file regexes against path bytes (#​2541)
• Show hook aliases in run output (#​2497)
• Show hook descriptions in run output (#​2490)

Performance

• Avoid env cache scans for skipped hooks (#​2502)
• Cache Node version queries (#​2500)

Bug fixes

• Fix Node hook installation with npm 11 (#​2487)
• Isolate dependency installs from inherited Git repository state (#​2506)

Documentation

• Document combined group filtering (#​2495)
• Explain what prek does in README (#​2507)
• Refresh "Why prek" highlights (#​2474)

Contributors

• @​will-wright-eng
• @​Repiteo
• @​j178

v0.4.12

Compare Source

Released on 2026-08-03.

Enhancements

• Add --require-group for hook group intersections (#​2472)
• Align fast-path and builtin pre-commit hooks (#​2433)
• Do not shuffle file list for verbose output (#​2431)
• Improve top-level command descriptions (#​2429)
• Install uv from Astral CDN and drop source racing (#​2455)
• Make prek install --force bypass external hooks paths (#​2437)
• Show builtin hook flags in verbose list output (#​2427)
• Verify uv release archive checksums (#​2456)

Performance

• Precompute file tags in parallel (#​2440)
• Skip diffs after known hook modifications (#​2447)
• Skip worktree diffs for read-only languages (#​2432)
• Track builtin hook file changes directly (#​2404)

Bug fixes

• Use full object IDs in diff snapshots (#​2448)

Documentation

• Add a multi-repository configuration example (#​2434)
• Rewrite benchmark documentation (#​2469)

Contributors

• @​j178
• @​BitWeaverDev
• @​allanlewis

v0.4.11

Compare Source

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern,
  as native alternatives for pygrep use cases. deny-pattern fails when a
  configured pattern is found, while require-pattern ensures every selected
  file contains a match. By matching natively without spawning a Python
  subprocess, they run over 4x faster than pygrep in benchmarks. Note that
  they use
  Rust regex syntax, which does
  not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files
  matching a glob. It can be repeated or combined with --files and
  --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  
  [[repos]]
  repo = "builtin"
  hooks = [
    { id = "check-json", priority = "checks" },
    { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#​2359)
• Support --glob patterns in prek run (#​2381)
• Support reusable aliases for hook priorities (#​2331)
• Implement requirements-txt-fixer as a builtin hook (#​2390)
• Improve user-facing warnings and errors (#​2380)
• Install Node hooks through git url (#​2394)

Performance

• Reduce blocking-pool overhead in file hooks (#​2384)
• Speed up mixed-line-ending scans with memchr2 (#​2391)

Bug fixes

• Honor filenames in builtin hook entry and args (#​2389)
• Match identify tags across filename parts (#​2399)
• Preserve hook output order with a shared pipe (#​2385)
• Preserve system download policy when applying metadata (#​2395)

Contributors

• @​j178
• @​chrisoro

v0.4.10

Compare Source

Released on 2026-07-16.

Enhancements

• Add PHP language support (#​2314)
• Add freeze option to update settings (#​2323)
• Add tag filters to update configuration (#​2354)
• Identify 'mts' and 'cts' as TypeScript files (#​2209)
• Publish Alpine Docker images (#​2352)
• Support builtin and meta in try-repo (#​2350)

Bug fixes

• Fix Python discovery order (#​2348)
• Fix Windows progress rendering (#​2328)
• Preserve configured repo values for updates (#​2324)
• Scope synthetic GIT_WORK_TREE to git commands (#​2356)

Documentation

• Expand common workflows guide (#​2351)

Contributors

• @​j178

v0.4.9

Compare Source

Released on 2026-07-11.

Note: This release changes the repository identity schema stored in cached hook environments. Existing
hook environments will be invalidated, and prek will reinstall them automatically when needed.

Enhancements

• Preserve additional dependency order (#​2311)
• Remove parallel Ruby gem installation (#​2307)
• Warn for missing update repositories (#​2316)

Bug fixes

• Fix mixed workspace selectors (#​2306)
• Fix try-repo local path resolution (#​2310)
• Use resolved gem executable (#​2308)
• Validate complete XML documents in check-xml (#​2312)

Contributors

• @​j178

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Javascript size report

	Size
Base (main)	1143.9 KB
PR	1140.0 KB
Delta	-3.9 KB (-0.3%)

✅ Size decreased -0.3%.