Update SonarSource/gh-action_pre-commit action to v2 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/gh-action_pre-commit	action	major	1.2.0 → 2.0.0

---

Release Notes

SonarSource/gh-action_pre-commit (SonarSource/gh-action_pre-commit)

v2.0.0

Compare Source

Breaking changes

Permission changes

• id-token: write permission is now required
• The repository must be granted Vault access to the Artifactory private-reader / public-reader token used for Repox
  authentication (the reader is chosen from the repository visibility)

Input and output parameter changes

• extra-args now has event-based defaults. Drop the old PR-only --from-ref / --to-ref to use the now automatically
  supported merge_group and push triggers:
  • on pull_request and merge_group events: incremental --from-ref / --to-ref (base...head).
  • on push, workflow_dispatch, and other events: --all-files.
• ignore-failure input is removed and can be safely dropped from the workflow. Hook failures now always fail the
  action step, including on push and merge_group triggers.
• status and logs outputs are removed.

Pre-commit version update

• The action installs the pre-commit CLI only when it is not already available in the environment. v1 installed
  3.7.1; v2 installs 4.6.2. If a caller already provides pre-commit on PATH (for example using
  SonarSource/mise-action-wrapper), that version is used unchanged.

Performance improvements

• pre-commit CLI and hooks are cached on S3

Full Changelog: SonarSource/gh-action_pre-commit@1.2.1...2.0.0

v1.2.2

Compare Source

What's Changed

Bug Fixes

• Authenticate git clones of pre-commit hook repos: pre-commit install-hooks clones into ~/.cache/pre-commit, outside actions/checkout's workspace-scoped credentials, so unauthenticated git fetch of hook repos could fail intermittently on shared runner IPs (could not read Username for 'https://github.com'). Hook install and execution steps now rewrite github.com URLs with GITHUB_TOKEN (step-scoped, not global) and use GIT_ASKPASS instead of the ineffective GIT_TERMINAL_PROMPT. (#​56, BUILD-12495)

Full Changelog: SonarSource/gh-action_pre-commit@1.2.1...1.2.2

v1.2.1

Compare Source

What's Changed

Dependency Updates

Package	Update	Change
actions/setup-python	minor	v6.1.0 → v6.3.0 (#​45)
nick-fields/assert-action	pin	v4 → v4.0.1 (#​45)
actions/cache	major	v5.0.1 → v6.1.0 (#​46)
actions/checkout	major	v6.0.1 → v7.0.0 (#​46)
nick-fields/assert-action	major	v2.0.0 → v4.0.1 (#​46)
nick-fields/assert-action	major	v2 → v4 (#​46)

Internal & Chores

• Added GitHub workflows (PullRequestClosed, PullRequestCreated, RequestReview, SubmitReview) to automate Jira status updates on PR review events, using SonarSource/vault-action-wrapper for credential retrieval (#​49, BUILD-11517)

Full Changelog: SonarSource/gh-action_pre-commit@1.2.0...1.2.1

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "after 7am every weekday,before 8pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: BUILD-12524

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud