chore(deps-dev): have Dependabot update the pre-commit hooks

[jenstroeger]

Summary

Dependabot understand pre-commit configurations, so let it keep the deps up-to-date. See also the docs.

Unfortunately, pre-commit for our hooks uses pip to install these additional dependencies and pip’s requirements specifiers do not support git hashes (docs) such that the additional dependencies continue to use version tags.

Description of changes

Added Dependabot pre-commit ecosystem (docs).

Related issues

n/a

Checklist

• I have reviewed the contribution guide.
• My PR title and commits follow the Conventional Commits convention.
• My commits include the "Signed-off-by" line.
• I have signed my commits following the instructions provided by GitHub. Note that we run GitHub's commit verification tool to check the commit signatures. A green verified label should appear next to all of your commits on GitHub.
• I have updated the relevant documentation, if applicable.
• I have tested my changes and verified they work as expected.

[behnazh-w]

Thanks for the PR. Does pre-commit autoupdate update the commit SHAs?

[jenstroeger]

Does pre-commit autoupdate update the commit SHAs?

It does, but you need to use the --freeze option:

macaron > pre-commit autoupdate --freeze
[https://github.com/commitizen-tools/commitizen] updating 4fbeae7861663ecf4b4989211eba41c1a3fb1227 -> v4.13.10 (frozen)
...

[jenstroeger]

@behnazh-w we can group all of these pre-commit PRs into one, see also

• chore(deps-dev): group Dependabot updates for pre-commit into a single PR jenstroeger/python-package-template#1167