Focus pip-audit on the relevant dependencies

Author: sbp

.pre-commit-config.yaml

@@ -100,10 +100,16 @@ repos:
   rev: v2.10.0
   hooks:
     - id: pip-audit
-      # TODO: remove when GitHub Actions has pip 26.0+
-      args: ["--ignore-vuln", "CVE-2026-1703"]
+      args:
+        - '-r'
+        - 'requirements-for-pip-audit.txt'
+        - '--disable-pip'
+        - '--no-deps'
+        # TODO: Remove when #644 is complete
+        - '--ignore-vuln'
+        - 'CVE-2026-26007'
 - repo: https://github.com/oxc-project/mirrors-oxlint
-  rev: v1.43.0
+  rev: v1.46.0
   hooks:
     - id: oxlint
       name: lint JS files with Oxlint

Makefile

@@ -140,3 +140,4 @@ update-deps:
 	pre-commit autoupdate || :
 	uv lock --upgrade --exclude-newer "$$(date -u +%Y-%m-%dT%H:%M:%SZ)"
 	uv sync --frozen --all-groups
+	uv export --frozen --format requirements-txt --no-emit-project --no-header --no-hashes > requirements-for-pip-audit.txt