deps: update pre-commit hooks

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
renovatebot/pre-commit-hooks	repository	minor	42.66.11 → 42.70.2
rhysd/actionlint	repository	patch	v1.7.9 → v1.7.10

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

renovatebot/pre-commit-hooks (renovatebot/pre-commit-hooks)

v42.70.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.70.2 for more changes

v42.70.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.70.1 for more changes

v42.70.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.70.0 for more changes

v42.69.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.69.2 for more changes

v42.69.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.69.1 for more changes

v42.69.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.69.0 for more changes

v42.68.5

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.5 for more changes

v42.68.4

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.4 for more changes

v42.68.3

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.3 for more changes

v42.68.2

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.2 for more changes

v42.68.1

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.1 for more changes

v42.68.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.68.0 for more changes

v42.67.0

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.67.0 for more changes

v42.66.14

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.66.14 for more changes

v42.66.13

Compare Source

See https://github.com/renovatebot/renovate/releases/tag/42.66.13 for more changes

v42.66.12

Compare Source

rhysd/actionlint (rhysd/actionlint)

v1.7.10

Compare Source

• Support YAML anchors and aliases (&anchor and *anchor) in workflow files. In addition to parsing YAML anchors correctly, actionlint checks unused and undefined anchors. See the document for more details. (#​133, thanks @​srz-zumix for the initial implementation at #​568 and @​alexaandru for trying another approach at #​557).

  jobs:
    test:
      runs-on: ubuntu-latest
      services:
        nginx:
          image: nginx:latest
          credentials: &credentials
            username: ${{ secrets.user }}
            password: ${{ secrets.password }}
      steps:
        - run: ./download.sh
          # OK: Valid alias to &credentials
          env: *credentials
        - run: ./check.sh
          # ERROR: Undefined anchor 'credential'
          env: *credential
        - run: ./upload.sh
          # ERROR: Unused anchor 'credentials'
          env: &credentials

• Remove support for *-xl macOS runner labels because they were dropped. (#​592, thanks @​muzimuzhi)
• Remove support for the macOS 13 runner labels because they were dropped on Dec 4, 2025. (#​593, thanks @​muzimuzhi)
  • macos-13
  • macos-13-large
  • macos-13-xlarge
• Increase the maximum number of inputs in the workflow_dispatch event from 10 to 25 because the limitation was recently relaxed. (#​598, thanks @​Haegi)
• Support artifact-metadata permission for workflow permissions. (#​602, thanks @​martincostello)
• Detect more complicated constants at if: conditions as error. See the rule document for more details.
• Refactor the workflow parser with Go iterators. This slightly improves the performance and memory usage.
• Fix parsing extra { and } characters in format string of format() function call. For example v1.7.9 didn't parse "{{0} {1} {2}}" correctly.
• Detect an invalid value at type in workflow call inputs as error.
• Report YAML merge key << as error because GitHub Actions doesn't support the syntax.
• Check available contexts in expressions at jobs.<job_id>.snapshot.if.

  snapshot:
    image-name: my-custom-image
    # ERROR: `env` context is not allowed here
    if: ${{ env.USE_SNAPSHOT == 'true' }}

• Fix the instruction to install actionlint with mise in the installation document. (#​591, thanks @​risu729)
• Update the popular actions data set to the latest to include new major versions of the actions.

---

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.