Bump prek from 0.4.12 to 0.4.13 in the uv-dependencies group

[dependabot]

Bumps the uv-dependencies group with 1 update: prek.

Updates prek from 0.4.12 to 0.4.13

Release notes

Sourced from prek's releases.

0.4.13

Release Notes

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

Bug fixes

... (truncated)

Commits

• 6204a68 Bump version to 0.4.13 (#2543)
• f1c73c5 Add mise language support (#2540)
• 3f08ed4 Match file regexes against path bytes (#2541)
• 6bc5f06 Update Rust crate serde-saphyr to v1 (#2539)
• b8c5c69 Update Rust crate fancy-regex to 0.19.0 (#2537)
• 2557af9 Update prek hooks (#2528)
• a958731 Update Rust crate http to v1.5.0 (#2538)
• fc8b9a4 Update Rust crate clap to v4.6.5 (#2531)
• 3bacaa1 Update dependency uv to v0.12.1 (#2536)
• 222fc00 Update Rust crate toml to v1.1.4 (#2535)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[deepsource-io]

DeepSource Code Review

We reviewed changes in f4c2aa7...3d405b3 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 23, 2026 10:22a.m.	Review ↗
Secrets		Aug 23, 2026 10:22a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​prek@​0.4.12 ⏵ 0.4.13

View full report