chore: add zizmor and prek

.github/workflows/test.yaml

@@ -12,9 +12,6 @@ permissions:
 
 jobs:
   lint:
-    strategy:
-      matrix:
-        cmd: ["black", "ruff", "mypy"]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -30,7 +27,7 @@ jobs:
       - name: Install deps
         run: uv sync --all-extras
       - name: Run lint check
-        run: uv run pre-commit run -a ${{ matrix.cmd }}
+        run: uv run prek run -a
   pytest:
     strategy:
       matrix:

.pre-commit-config.yaml

@@ -1,21 +1,12 @@
-# See https://pre-commit.com for more information
-# See https://pre-commit.com/hooks.html for more hooks
 repos:
-  - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v6.0.0
+  - repo: builtin
     hooks:
-      - id: check-ast
       - id: trailing-whitespace
       - id: check-toml
       - id: end-of-file-fixer
 
-  - repo: https://github.com/asottile/add-trailing-comma
-    rev: v4.0.0
-    hooks:
-      - id: add-trailing-comma
-
   - repo: https://github.com/crate-ci/typos
-    rev: v1.38.1
+    rev: v1.50.3
     hooks:
       - id: typos
 
@@ -24,6 +15,11 @@ repos:
     hooks:
       - id: detect-secrets
 
+  - repo: https://github.com/zizmorcore/zizmor-pre-commit
+    rev: v1.30.1
+    hooks:
+      - id: zizmor
+
   - repo: local
     hooks:
       - id: black

pyproject.toml

@@ -36,7 +36,7 @@ dependencies = [
 
 [dependency-groups]
 dev = [
-    "pre-commit>=4.4.0",
+    "prek>=0.5.4",
     # lint
     "ruff>=0.16.9",
     "black>=26.5.1",
@@ -48,6 +48,7 @@ dev = [
     "coverage>=7.11.3",
     "pytest-xdist[psutil]>=3.8.0",
     "anyio>=4.11.0",
+    "zizmor>=1.30.1",
 ]
 
 [build-system]
@@ -118,8 +119,8 @@ lint.ignore = [
     "PLR0913", # Too many arguments for function call
     "D106",    # Missing docstring in public nested class
 ]
-exclude = [".venv/"]
 lint.mccabe = { max-complexity = 10 }
+exclude = [".venv/"]
 line-length = 88
 
 [tool.ruff.lint.per-file-ignores]