[dependabot]

Bumps the uv-updates group with 2 updates: prek and tox.

Updates prek from 0.5.2 to 0.5.3

Release notes

Sourced from prek's releases.

0.5.3

Release Notes

Released on 2026-09-13.

Enhancements

• Add PEP 740 attestations for PyPI releases (#2705)
• Add a check-jsonc builtin hook (#2682)
• Allow disabling automatic uv installation (#2702)

Bug fixes

• Fix Julia additional dependency specifiers (#2703)
• Update granit-parser to fix YAML flow indentation (#2707)

Contributors

• @​clbarnes
• @​j178
• @​tisonkun

Install prek 0.5.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.5.3

File	Platform	Checksum
prek-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
prek-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
prek-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum
prek-x86_64-pc-windows-msvc.zip	x64 Windows	checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.3

Released on 2026-09-13.

Enhancements

• Add PEP 740 attestations for PyPI releases (#2705)
• Add a check-jsonc builtin hook (#2682)
• Allow disabling automatic uv installation (#2702)

Bug fixes

• Fix Julia additional dependency specifiers (#2703)
• Update granit-parser to fix YAML flow indentation (#2707)

Contributors

• @​clbarnes
• @​j178
• @​tisonkun

Commits

• b7eb602 Bump version to 0.5.3 (#2708)
• 4644f81 Update granit-parser to fix YAML flow indentation (#2707)
• 87f2ea4 Use self-repository syntax in CI workflows
• f39abae Add PEP 740 attestations for PyPI releases (#2705)
• f4924dc Allow disabling automatic uv installation (#2702)
• 156c0ce Fix Julia additional dependency specifiers (#2703)
• c3ede77 Add a check-jsonc builtin hook (#2682)
• c0b9749 Verify checksums for PyPI/mirror wheel installs (#2688)
• fbe5c66 Update prek hooks (#2690)
• 4687a2c Fix check-hooks-apply for builtin Windows filename checks
• Additional commits viewable in compare view

Updates tox from 4.61.4 to 4.61.5

Release notes

Sourced from tox's releases.

v4.61.5

What's Changed

• chore(type): narrow execute_async cwd for pyrefly 1.3 by @​yuefdev in tox-dev/tox#4069
• docs: fix the parameter list on Loader.build by @​hxperl in tox-dev/tox#4070
• fix(config): reject boolean TOML range bounds by @​yuefdev in tox-dev/tox#4066
• fix(config): accept empty set_env lists by @​yuefdev in tox-dev/tox#4065
• fix: correct coverage startup environment variable by @​yuefdev in tox-dev/tox#4067
• fix(config): let empty factor fallbacks override TOML group defaults by @​glaziermag in tox-dev/tox#4072

New Contributors

• @​yuefdev made their first contribution in tox-dev/tox#4069
• @​hxperl made their first contribution in tox-dev/tox#4070
• @​glaziermag made their first contribution in tox-dev/tox#4072

Full Changelog: tox-dev/tox@4.61.4...4.61.5

Changelog

Sourced from tox's changelog.

Bug fixes - 4.61.5

• An empty set_env list in TOML no longer fails to load; like an empty table, it clears inherited variables - by :user:yuefdev. (:issue:4065)
• A TOML factor range now rejects true or false as start or stop instead of reading them as 1 and 0 - by :user:yuefdev. (:issue:4066)
• Preserve an explicitly empty {factor:label:} fallback instead of using the declared factor group default. (:issue:4072)

Improved documentation - 4.61.5

• Loader.build documented a future parameter it no longer takes and left factory undocumented, so the plugin API reference listed a parameter that does not exist - by :user:hxperl. (:issue:4070)

Contributor-facing changes - 4.61.5

• Restore COVERAGE_PROCESS_START in the test environments; a mangled key had left it unset since the move to tox.toml - by :user:yuefdev. (:issue:4067)

---

v4.61.4 (2026-09-09)

---

Commits

• 40a5d2b release 4.61.5
• c504e48 fix(config): let empty factor fallbacks override TOML group defaults (#4072)
• a5a7ce6 fix: correct coverage startup environment variable (#4067)
• 3632978 fix(config): accept empty set_env lists (#4065)
• b429bcc fix(config): reject boolean TOML range bounds (#4066)
• 0975be8 [pre-commit.ci] pre-commit autoupdate (#4068)
• 7b5068b docs: fix the parameter list on Loader.build (#4070)
• 2b650b0 chore(type): narrow execute_async cwd for pyrefly 1.3 (#4069)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions