Bump prek from 0.4.1 to 0.4.5

[dependabot]

Bumps prek from 0.4.1 to 0.4.5.

Release notes

Sourced from prek's releases.

0.4.5

Release Notes

Released on 2026-06-15.

✨Highlights

0.4.5 completes prek's pre-commit language coverage. With R, Conda, Perl, and coursier now supported, prek supports every language available in pre-commit, plus prek-only modern languages such as Bun and Deno.

This is full feature parity with pre-commit. The last major compatibility gap is closed, and prek is now on the path to 1.0.

💚 Sponsorship

If prek saves time for you or your team, please consider sponsoring the project on GitHub Sponsors. It helps keep new features, performance work, and maintenance moving.

Enhancements

• Add Perl language support (#2201)
• Add R language support (#2206)
• Add Conda language support (#2203)
• Add coursier language support (#2194)
• Add group filters to list (#2152)
• Remove legacy repo path support (#2150)
• Skip cloning fully filtered remote repos (#2151)

Performance

• Avoid building JSON trees in syntax hooks (#2156)
• Scan mixed line endings without line vector (#2160)
• Skip file scan for always-run no-filename hooks (#2155)
• Use fixed buffer for EOF scan (#2163)
• Use fixed buffer for private key scan (#2164)

Bug fixes

• Fix pretty-format-json CRLF handling (#2210)
• Handle missing blobs in diff snapshots (#2211)
• Ignore coursier channel from working repo (#2202)

Contributors

• @​j178

Install prek 0.4.5

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.5

Released on 2026-06-15.

✨Highlights

0.4.5 completes prek's pre-commit language coverage. With R, Conda, Perl, and coursier now supported, prek supports every language available in pre-commit, plus prek-only modern languages such as Bun and Deno.

This is full feature parity with pre-commit. The last major compatibility gap is closed, and prek is now on the path to 1.0.

💚 Sponsorship

If prek saves time for you or your team, please consider sponsoring the project on GitHub Sponsors. It helps keep new features, performance work, and maintenance moving.

Enhancements

• Add Perl language support (#2201)
• Add R language support (#2206)
• Add Conda language support (#2203)
• Add coursier language support (#2194)
• Add group filters to list (#2152)
• Remove legacy repo path support (#2150)
• Skip cloning fully filtered remote repos (#2151)

Performance

• Avoid building JSON trees in syntax hooks (#2156)
• Scan mixed line endings without line vector (#2160)
• Skip file scan for always-run no-filename hooks (#2155)
• Use fixed buffer for EOF scan (#2163)
• Use fixed buffer for private key scan (#2164)

Bug fixes

• Fix pretty-format-json CRLF handling (#2210)
• Handle missing blobs in diff snapshots (#2211)
• Ignore coursier channel from working repo (#2202)

Contributors

• @​j178

0.4.4

Released on 2026-06-04.

... (truncated)

Commits

• bb31082 Update README.md
• fa4e2dc Bump version to 0.4.5 (#2221)
• e9336fa Add R language support (#2206)
• 97a5a15 Update Rust crate which to v8.0.3 (#2219)
• 20a519a Update Rust crate ignore to v0.4.26 (#2218)
• 88f0e2b Update dependency uv to v0.11.19 (#2214)
• 7bd4300 Update GitHub Actions to v7 (#2220)
• 48ed5cc Update Rust crate async_zip to 0.0.18 (#2217)
• 257e98a Update pre-commit to v1.47.2 (#2216)
• 0c04602 Update GitHub Actions (#2215)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[rtibblesbot]

Dependency-update review: prek 0.4.1 → 0.4.5 (dev dependency).

• Semver risk: Minor (0.x series)
• Type: Development only (dev group in pyproject.toml) — not shipped to users
• Breaking changes: None across 0.4.2–0.4.5. "Remove legacy repo path support" (0.4.5) refers to prek's internal pre-commit repo-path handling, not anything this repo's .pre-commit-config.yaml relies on.
• Security fixes: None in this range
• Other changes: New R/Conda/Perl/coursier hook language support, file-scan performance work, minor bug fixes — none touch functionality this project uses
• Lockfile scope: uv.lock diff is limited to the prek package block (hashes/URLs), no unexpected transitive changes
• CI: Passing

No code changes required. Approving.

---

@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Ran a dependency-update review pipeline over the version bump:

• Classified the bump by semver (patch / minor / major) and dependency type (production vs. development)
• Extracted the changelog and release notes across the version range
• Assessed compatibility with this project's usage and whether any code changes are required
• Treated CI as the primary safety net
• Scaled the review depth to the update's risk
• Chose the verdict from semver risk, changelog findings, and CI status

[rtibbles]

No concerns from changelog or diff.