chore(pre-commit): bump the pre-commit-hooks group across 1 directory with 2 updates

[dependabot]

Bumps the pre-commit-hooks group with 2 updates in the / directory: https://github.com/betterleaks/betterleaks and https://github.com/pypa/pip-audit.

Updates https://github.com/betterleaks/betterleaks from v1.3.1 to 1.4.1

Release notes

Sourced from https://github.com/betterleaks/betterleaks's releases.

v1.4.1

What's New

Quick little patch with a few things:

• updated go.mod to use betterleak's go-re2 fork so go install and precommits will work better.
• added some more rules including scaleway and gcp
• added hugging face source
• fixed secret redaction

Changelog

• 857e3400d4eebdee74f9219a80bf3983262ae48d Add Contributor Covenant Code of Conduct (#161)
• fd5f4d00ff63660fbcea9fbb6671ba7ae3706ccb Update README with Betterleaks config recommendations
• 40d5cafea2045d16a217c1b70a69d6bba6b892ec bump go.mod and ver check in release worfklow (#167)
• e66c46251c5116d512cb230527d6413d3f990f10 fix: centralize secret redaction in report path for all scan sources (#157)
• 262fdfb523768ef7d579bdd157ce17e15b5f5d89 gcp service tokens and app default creds (#164)
• e86c443ea99af7d44c901a21e73c161656482dfd hugging face source (#165)
• 83adb3dab2c3dc8485f991af7046ae2aec871726 move mds
• 3ac987600af0b4c752507f081ccdd1c9a6e7e085 scaleway rule (#106)
• 54243c8f5bcbae5b6e54c896eae95673bf703244 use go-re2 fork (#166)

v1.4.0

What's New

GitLab Source

You can now scan GitLab groups and projects. The GitLab command has a very similar shape to the GitHub command.

Usage:
  betterleaks gitlab <target-url> [flags]
Examples:
Scan a project's git history
betterleaks gitlab https://gitlab.com/group/project
Scan a merge request
betterleaks gitlab https://gitlab.com/group/project/-/merge_requests/42
Scan all projects under a group (recursing into subgroups by default)
betterleaks gitlab https://gitlab.com/mygroup
Scan projects plus issues and MRs
betterleaks gitlab --include=issues,mrs https://gitlab.com/group/project
Scan a self-hosted instance
betterleaks gitlab --base-url=https://gitlab.example.com/ https://gitlab.example.com/group/project

Pretty Printing

Betterleaks got a glowup 💄 Check it

... (truncated)

Commits

• 40d5caf bump go.mod and ver check in release worfklow (#167)
• 54243c8 use go-re2 fork (#166)
• 3ac9876 scaleway rule (#106)
• e66c462 fix: centralize secret redaction in report path for all scan sources (#157)
• e86c443 hugging face source (#165)
• 262fdfb gcp service tokens and app default creds (#164)
• 83adb3d move mds
• 857e340 Add Contributor Covenant Code of Conduct (#161)
• fd5f4d0 Update README with Betterleaks config recommendations
• 0f4629c GitLab source + GitLab cmd (#158)
• Additional commits viewable in compare view

Updates https://github.com/pypa/pip-audit from v2.10.0 to 2.10.1

Release notes

Sourced from https://github.com/pypa/pip-audit's releases.

v2.10.1

Fixed

• Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)

Changelog

Sourced from https://github.com/pypa/pip-audit's changelog.

[2.10.1]

Fixed

• Fixed a KeyError crash when an OSV vulnerability record contains an affected entry that omits the optional ranges field (#1046)

Commits

• 8894eb8 Merge pull request #1056 from pypa/copilot/release-2101
• 1c625b7 Update version in README.md to 2.10.1
• fd2094b Prep 2.10.1 release
• 58d2488 build(deps): bump github/codeql-action from 4.35.2 to 4.36.1 (#1052)
• 8df9420 build(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 (#1044)
• 3f618d3 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#1053)
• 4849132 Restrict OIDC token to publish job (#1050)
• c1eb69a Fix KeyError when OSV affected entry omits optional ranges field (#1046)
• 68de07f Merge pull request #1054 from pypa/fix/1047
• ef31c9e Formatting fixes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions