Bump prek from 0.5.3 to 0.5.4 in the uv-dependencies group

[dependabot]

Bumps the uv-dependencies group with 1 update: prek.

Updates prek from 0.5.3 to 0.5.4

Release notes

Sourced from prek's releases.

0.5.4

Release Notes

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin hooks up to 273% faster (check-yaml: 273%, check-json: 80%, check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#2733)
• Add --check and simplify end-of-file-fixer (#2764)
• Add --check to file-contents-sorter (#2765)
• Add --check to requirements-txt-fixer (#2766)
• Add --check to trailing-whitespace (#2763)
• Expose and document prek util generate-shell-completion (#2727)
• Support hide_status in project and user configuration (#2760)
• Support look-around regex in builtin pattern hooks (#2732)

Performance

• Cache the resolved Git executable on macOS (#2726)
• Combine and cache Git repository path queries (#2724)
• Optimize common builtin hook execution (#2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#2769)
• Scan check-merge-conflict files in fixed-size blocks (#2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#2770)

Bug fixes

• Retry transient rename failures on Windows (#2756)
• Use PATH to resolve prek in completion scripts (#2719)

Documentation

• Clarify the flow and scope of usage guides (#2710)
• Reorganize usage guides and reference documentation (#2709)

Other changes

• Sync latest identify tags (#2762)

Contributors

• @​github-actions

... (truncated)

Changelog

Sourced from prek's changelog.

0.5.4

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin hooks up to 273% faster (check-yaml: 273%, check-json: 80%, check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#2733)
• Add --check and simplify end-of-file-fixer (#2764)
• Add --check to file-contents-sorter (#2765)
• Add --check to requirements-txt-fixer (#2766)
• Add --check to trailing-whitespace (#2763)
• Expose and document prek util generate-shell-completion (#2727)
• Support hide_status in project and user configuration (#2760)
• Support look-around regex in builtin pattern hooks (#2732)

Performance

• Cache the resolved Git executable on macOS (#2726)
• Combine and cache Git repository path queries (#2724)
• Optimize common builtin hook execution (#2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#2769)
• Scan check-merge-conflict files in fixed-size blocks (#2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#2770)

Bug fixes

• Retry transient rename failures on Windows (#2756)
• Use PATH to resolve prek in completion scripts (#2719)

Documentation

• Clarify the flow and scope of usage guides (#2710)
• Reorganize usage guides and reference documentation (#2709)

Other changes

• Sync latest identify tags (#2762)

Contributors

• @​github-actions
• @​j178

Commits

• 77c4056 Summarize builtin hook speedups
• 7a6b8d1 Bump version to 0.5.4
• c7ec693 Update ubuntu:26.04 Docker digest to da6fc2b (#2772)
• eee5822 Scan check-merge-conflict files in fixed-size blocks (#2781)
• 4c579dc Update dependency uv to v0.12.17 (#2773)
• 1f2a621 Update Rust crate clap to v4.6.7 (#2775)
• aeea7a5 Update GitHub Actions (#2778)
• 51ca2db Update Rust crate rustix to v1.1.5 (#2777)
• 80e8bcc Update Rust crate clap_complete to v4.6.11 (#2776)
• 0f23764 Update Rust crate async-compression to v0.4.48 (#2774)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​prek@​0.5.3 ⏵ 0.5.4	+1

View full report

[deepsource-io]

DeepSource Code Review

We reviewed changes in 657a33c...eb37de7 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Oct 11, 2026 4:00p.m.	Review ↗
Secrets		Oct 11, 2026 4:00p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[github-actions]

Visit the preview URL for this PR (updated for commit eb37de7):

https://nextcommunity-eea10--pr659-dependabot-uv-uv-dep-xejmz3g5.web.app

_{(expires Sun, 18 Oct 2026 16:01:01 GMT)}

_{🔥 via Firebase Hosting GitHub Action 🌎}

_{Sign: ba5543968e5b4f067b5810ac857f9362d1b2a323}