[pre-commit.ci] pre-commit autoupdate

updates:
- [github.com/astral-sh/ruff-pre-commit: v0.9.2 → v0.12.5](astral-sh/ruff-pre-commit@v0.9.2...v0.12.5)
- [github.com/pre-commit/mirrors-mypy: v1.14.1 → v1.17.0](pre-commit/mirrors-mypy@v1.14.1...v1.17.0)
- [github.com/gitleaks/gitleaks: v8.23.1 → v8.28.0](gitleaks/gitleaks@v8.23.1...v8.28.0)
- [github.com/python-jsonschema/check-jsonschema: 0.31.0 → 0.33.2](python-jsonschema/check-jsonschema@0.31.0...0.33.2)

Author: pre-commit-ci[bot]

.pre-commit-config.yaml

@@ -4,13 +4,13 @@
 
 repos:
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.9.2
+    rev: v0.12.5
     hooks:
       - id: ruff
         args: [--fix, --exit-non-zero-on-fix]
       - id: ruff-format
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.14.1
+    rev: v1.17.0
     hooks:
       - id: mypy
         args: [--no-strict-optional, --ignore-missing-imports]
@@ -44,14 +44,14 @@ repos:
         args:
           - --allow-missing-credentials
   - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.23.1
+    rev: v8.28.0
     hooks:
       - id: gitleaks
         # The hook runs 'gitleaks protect --staged' which parses output of
         # 'git diff --staged', i.e. always passes in pre-push/manual stage.
         stages: [pre-commit]
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.31.0
+    rev: 0.33.2
     hooks:
       - id: check-github-workflows
         args: ["--verbose"]