chore(deps): update dependencies and pre-commit hooks (#274)

Author: wpk-nist-gov

.pre-commit-config.yaml

@@ -20,7 +20,7 @@ repos:
 
   # * sync dependencies
   - repo: https://github.com/wpk-nist-gov/sync-pre-commit-hooks
-    rev: v0.7.0
+    rev: v0.8.0
     hooks:
       - id: forbidden-files
       - id: sync-pre-commit-deps
@@ -70,7 +70,7 @@ repos:
         stages: [manual]
   # ** repo review
   - repo: https://github.com/scientific-python/cookie
-    rev: 2026.04.04
+    rev: 2026.06.18
     hooks:
       - id: sp-repo-review
         stages: [manual]

noxfile.py.lock

@@ -138,15 +138,15 @@ wheels = [
 
 [[package]]
 name = "virtualenv"
-version = "21.5.0"
+version = "21.5.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "distlib" },
     { name = "filelock" },
     { name = "platformdirs" },
     { name = "python-discovery" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/cd/0e/933bacb37b57ae7928b0030eef205a3dbb3e37afdbdde5be2e113318958f/virtualenv-21.5.0.tar.gz", hash = "sha256:98847aadf5e2037e0e4d2e19528eb3aca6f23906422e59a510bff231a6d32fce", size = 4577424, upload-time = "2026-06-13T20:36:45.066Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f1/a5/81f987504738e6defeed61ec1c47e2aefab3c35d8eeb87e1b3f38cf28254/virtualenv-21.5.1.tar.gz", hash = "sha256:dca3bf98275a59c652b69d68e73433e597d977c2da9198882479d1a7188009c8", size = 4578798, upload-time = "2026-06-16T16:23:58.603Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e9/87/b0667ede418386ab631e48924b845d326f366d61e6bd08fe68a748fae4d4/virtualenv-21.5.0-py3-none-any.whl", hash = "sha256:8f7c38605023688c89789f566959006af6d61c99eeeb9e58342eb780c5761e5e", size = 4557937, upload-time = "2026-06-13T20:36:42.967Z" },
+    { url = "https://files.pythonhosted.org/packages/2c/02/3623e6169bed617ed1e2d372f7c69f92ec28d54c4dfc997055c8578ec148/virtualenv-21.5.1-py3-none-any.whl", hash = "sha256:55aa670b67bbfb991b03fda39bd3276d92c419d702376e98c5df1c9989a26783", size = 4558820, upload-time = "2026-06-16T16:23:56.963Z" },
 ]

pyproject.toml

@@ -314,11 +314,11 @@ python = "all"
 [tool.pyproject2conda.envs.uvx-tools]
 pip-deps = [
     # these used solely for specking tools to be run via uvx ...
-    "conda-lock>=4.0.0",
+    "conda-lock>=4.0.1",
     "copier-template-extensions>=0.3.3",
     "copier>=9.15.2",
     "grayskull>=3.1.1",
-    "prek>=0.4.4",
+    "prek>=0.4.5",
     "pyrefly>=1.0.0",
     "pyright>=1.1.410",
     "rooster>=0.1.1",

requirements/lock/uvx-tools.txt

@@ -8,9 +8,9 @@ cogapp==3.6.0 \
     --hash=sha256:6ea11c63221f92978d37d8d76208eadeae2a6e4641d323f165738a5464a19d32 \
     --hash=sha256:ec2a9170bfa644bf0d91996fdb5576c13d7e5e848bb2378a6f92727b48f92604
     # via -r requirements/uvx-tools.txt
-conda-lock==4.0.0 \
-    --hash=sha256:050305a490861baa98d6c3876ed7b394707a67587d939548aac5e20b91b41d36 \
-    --hash=sha256:979aacb4f67eb375f5d84ffbc7afc93c881ab9a513558c7461ed955fe243a3f6
+conda-lock==4.0.1 \
+    --hash=sha256:6dca87b262cfb6712256575d06c66b92e3d7b36ae3d96eeab8c193663e74cdc7 \
+    --hash=sha256:b0dea35c2d10ad9fe07bacfcb79c090e4817aa148aa493a9faff55415899bd30
     # via -r requirements/uvx-tools.txt
 copier==9.15.2 \
     --hash=sha256:50a39142d6493f2261762309374a7a7462dbab654c5d22fd9aa17b6a69b84a95 \
@@ -82,24 +82,24 @@ packaging==26.2 \
     --hash=sha256:5fc45236b9446107ff2415ce77c807cee2862cb6fac22b8a73826d0693b0980e \
     --hash=sha256:ff452ff5a3e828ce110190feff1178bb1f2ea2281fa2075aadb987c2fb221661
     # via -r requirements/uvx-tools.txt
-prek==0.4.4 \
-    --hash=sha256:0b04a0f36d07474f2a9fc5b1ba1197a1b326b2b211f39cd74cf0d4613545f7f4 \
-    --hash=sha256:143154b329c05b2f9fa3230e604d02d9c4297dd43f96135a8ba166772e8ecd60 \
-    --hash=sha256:23cfd96a25de1c93e3c43c746643b80489e3b2fa49ca9c0ffd6022e51535c900 \
-    --hash=sha256:3efa28fb37b9ddbafb7759da8d497f0d36cf02a05816e15d6541f5669d5d2114 \
-    --hash=sha256:3f3a25041733de987a47e5a7bace47182a6f0e2ae5f960cb54c1d4630afd2591 \
-    --hash=sha256:4058638532c6dcbf0076d23b9264cbdd9f0f0e320762e237a6b9e4e4b854a766 \
-    --hash=sha256:4ec5771153d158a0e4473933b7fd9b51e1b1f57f2df50aeb7560ea6812226dc5 \
-    --hash=sha256:619bab14071670249777deea0cc0b29d904c4a514cf33b20e583900a544f0399 \
-    --hash=sha256:9cebca8c15da4f1d6e3a25e6ae0611425c8596e926222050f2588c390e42df8a \
-    --hash=sha256:a2b7c8710546a1e894afa7ab022030cd4e21f1ee7ffb301b4360773d22f1f00f \
-    --hash=sha256:a427b792c4436f49732b1f6ebccf221fdcc6390c148474280da9c2c6eaabc9c4 \
-    --hash=sha256:b998038fc92c990e03147eb5b95b0f2c394517f8857ab911aac8e092f1b9b3ab \
-    --hash=sha256:bad3586fcea3e913f0edf2e8f132f97889e03976b7ee3d120fd294ad4e89a5eb \
-    --hash=sha256:c38c5140ae2ea55ebb02e6ca590a416664ea1af287cdd21f54daeec53a81015a \
-    --hash=sha256:c8742ac26363e74c855df6215a709d5db183204d00ac0f1a722b13aed4da3cd0 \
-    --hash=sha256:e02bd4d5e05c500e4d9f70f024e30d13aa361dc490724b7f476d2e35542c239f \
-    --hash=sha256:f032ccbe2d6edc345f81a6d772c18cc169d63c27b5a8292bfe416b352bdfee57
+prek==0.4.5 \
+    --hash=sha256:14109d37b33e5529db41a3539d4f8f72d295f6eeddede3964994d898b8cec05c \
+    --hash=sha256:1fd98b986767dafdb6b4305b563ee5a3a8f13bd3c78b98d708626815ea9f147f \
+    --hash=sha256:2be7bcf839de19a0144ed5a5aadf73bc5899cf6823bb1c58cf1d45ae389c201a \
+    --hash=sha256:40d262418105b2ede9836593a1927fc927cc8093c432e998640964102196996e \
+    --hash=sha256:50697089a86a78d16f087c1912a2f3bc2bea82319a220fac52cc8e3ec9fc0426 \
+    --hash=sha256:590427a42a3c1e5064487a0dc91167ae0c8a52168e77f574758ef9b138fcfd61 \
+    --hash=sha256:646a86a1a082dbd99fed96314b1064f5644bb34c1f4037a63547a18e2160fb86 \
+    --hash=sha256:66877ff21ae9d548f0f7e56fab8e65f1500a74a810e7749188c3f35a4a1b911b \
+    --hash=sha256:7546989b2403c96137bd79d19ebfe21facb87266cefe819db2458c3b9b23f350 \
+    --hash=sha256:86f76bd3d2ecf6fd9034d75c62ff4c786eb11d0dd0a1f79bbb4343b023e12769 \
+    --hash=sha256:8b2ac9227504371d97338215b344184cb0b31ca94113515a3a90c509c6c5a707 \
+    --hash=sha256:a586d14c3b852fdee1c3dcd0b9cb0915db9f9d054334b854fd9470bf68edf129 \
+    --hash=sha256:a8ed0d28f3e7790e4402a9324c386509066df6e67cc587f7406f9a245b97b7e8 \
+    --hash=sha256:aca9fa995536036a0171bcf7a4db96dc0a14f480054eda1d7d1c2e7739650993 \
+    --hash=sha256:e491a1a4641d91d8b03dcce5588397e76d2a5b432c9b0a6c70475972b4512ab4 \
+    --hash=sha256:f7517774c72b001573520dc7111156779fd3e5b4452c11f09ff53c71a067e835 \
+    --hash=sha256:fccd11613ae92619d1ecda0ab3359ceebeb38898909ec84a8d383733d12158cc
     # via -r requirements/uvx-tools.txt
 pyrefly==1.0.0 \
     --hash=sha256:1382d5b1fcdb49a4de9f34d112d2bddf290a78ff93ee8149492ad5f1077ddffc \

requirements/uvx-tools.txt

@@ -9,15 +9,15 @@
 #
 basedpyright>=1.39.8
 cogapp>=3.6.0
-conda-lock>=4.0.0
+conda-lock>=4.0.1
 copier-template-extensions>=0.3.3
 copier>=9.15.2
 cruft>=2.16.0
 grayskull>=3.1.1
 mypy[faster-cache]>=2.1.0
 nbqa>=1.9.1
 packaging>=26.2
-prek>=0.4.4
+prek>=0.4.5
 pyrefly>=1.0.0
 pyright>=1.1.410
 requirements-parser>=0.13.0

uv.lock

@@ -19,7 +19,7 @@ repos:
 
   # * sync dependencies
   - repo: https://github.com/wpk-nist-gov/sync-pre-commit-hooks
-    rev: v0.7.0
+    rev: v0.8.0
     hooks:
       - id: forbidden-files
       - id: sync-pre-commit-deps
@@ -65,7 +65,7 @@ repos:
         stages: [manual]
   # ** repo review
   - repo: https://github.com/scientific-python/cookie
-    rev: 2026.04.04
+    rev: 2026.06.18
     hooks:
       - id: sp-repo-review
         stages: [manual]

{{cookiecutter.project_name}}/.pre-commit-config.yaml

@@ -390,7 +390,7 @@ skip-package = true
 [tool.pyproject2conda.envs.uvx-tools]
 pip-deps = [
     # these used solely for specking tools to be run via uvx ...
-    "conda-lock>=4.0.0",
+    "conda-lock>=4.0.1",
     {%- if cookiecutter.__copier %}
     "copier-template-extensions>=0.3.3",
     "copier>=9.15.2",
@@ -402,7 +402,7 @@ pip-deps = [
     {%- if cookiecutter.use_jupyter %}
     "nbqa>=1.9.1",
     {%- endif %}
-    "prek>=0.4.4",
+    "prek>=0.4.5",
     "pyrefly>=1.0.0",
     "pyright>=1.1.410",
     "rooster>=0.1.1",