chore(deps): update pre-commit hooks

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
PyCQA/bandit	repository	patch	1.9.2 → 1.9.3
igorshubovych/markdownlint-cli	repository	minor	v0.46.0 → v0.47.0
python-jsonschema/check-jsonschema	repository	minor	0.35.0 → 0.36.1

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

PyCQA/bandit (PyCQA/bandit)

v1.9.3

Compare Source

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​1334
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1335
• Fix B608 to detect VALUES( without space by @​kfess in #​1337
• Add check for hardcoded passwords in dicts. by @​alanverresen in #​1338
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​1341
• Update tox tests for Python 3.10 by @​willschlitzer in #​1346
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in #​1347
• Limit B614 to torch.load deserializers by @​dibussoc in #​1348

New Contributors

• @​kfess made their first contribution in #​1337
• @​alanverresen made their first contribution in #​1338
• @​willschlitzer made their first contribution in #​1346
• @​dibussoc made their first contribution in #​1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

igorshubovych/markdownlint-cli (igorshubovych/markdownlint-cli)

v0.47.0

Compare Source

• Add output and exit code support for warnings
• Update markdownlint dependency to 0.40.0
  • Improve MD011/MD013/MD051/MD060
• Update all dependencies via Dependabot

python-jsonschema/check-jsonschema (python-jsonschema/check-jsonschema)

v0.36.1

Compare Source

• Update vendored schemas: buildkite, circle-ci, dependabot, github-issue-forms,
  github-workflows, gitlab-ci, mergify, readthedocs, renovate, snapcraft, taskfile
  (2026-01-25)

v0.36.0

Compare Source

• Update vendored schemas: bitbucket-pipelines, buildkite, circle-ci, dependabot,
  gitlab-ci, mergify, readthedocs, renovate, snapcraft (2025-12-14)
• Add GitHub Discussion category forms schema and pre-commit hook. Thanks :user:edgarrmondragon! (:pr:626)

---

Configuration

📅 Schedule: Branch creation - "on the first day of the month before 6am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}