Bump the python-packages group with 2 updates

[dependabot]

Bumps the python-packages group with 2 updates: copier and prek.

Updates copier from 9.17.0 to 9.17.2

Release notes

Sourced from copier's releases.

v9.17.2 (2026-08-19)

Security

• disallow Jinja {% include %} of symlinks resolving outside template root
• disallow config !include paths outside the template root

Refactor

• updating: delete user-removed files after rendering instead of excluding them

v9.17.1 (2026-08-04)

Security

• prevent code execution via Jinja finalizer by disallowing YAML tags
• prevent code execution via Jinja sandbox escape through path and settings objects

Changelog

Sourced from copier's changelog.

v9.17.2 (2026-08-19)

Security

• disallow Jinja {% include %} of symlinks resolving outside template root
• disallow config !include paths outside the template root

Refactor

• updating: delete user-removed files after rendering instead of excluding them

v9.17.1 (2026-08-04)

Security

• prevent code execution via Jinja finalizer by disallowing YAML tags
• prevent code execution via Jinja sandbox escape through path and settings objects

Commits

• 76239f5 bump: version 9.17.1 → 9.17.2
• 1ae1a94 fix: disallow Jinja {% include %} of symlinks resolving outside template root
• 10607b4 fix: disallow config !include paths outside the template root
• 70eb653 build(deps): update dependency rumdl to v0.2.56
• 8f3903a build(deps): update dependency pygments to v2.21.0
• e87dbf6 build(deps): update dependency commitizen to v4.17.1
• afcd1d0 build(deps): update dependency devbox to v0.18.0
• 151a002 build(deps): update dependency types-pyyaml to v6.0.12.20260815
• 74ec173 build(deps): update dependency mypy to v2.3.1
• 1466da0 build(deps): update astral-sh/setup-uv action to v10
• Additional commits viewable in compare view

Updates prek from 0.4.12 to 0.4.14

Release notes

Sourced from prek's releases.

0.4.14

Release Notes

Released on 2026-08-17.

Enhancements

• Support check-yaml unsafe mode (#2546)

Performance

• Reuse allocations in common filters (#2548)

Bug fixes

• Accept non-finite floats in check-yaml (#2545)
• Allow comment-heavy YAML in check-yaml (#2554)
• Sanitize captured terminal output before replay (#2552)

Contributors

• @​j178

Install prek 0.4.14

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.4.14/prek-installer.ps1 | iex"

Install prebuilt binaries via Homebrew

brew install prek

Download prek 0.4.14

File	Platform	Checksum
prek-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
prek-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
prek-aarch64-pc-windows-msvc.zip	ARM64 Windows	checksum

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.14

Released on 2026-08-17.

Enhancements

• Support check-yaml unsafe mode (#2546)

Performance

• Reuse allocations in common filters (#2548)

Bug fixes

• Accept non-finite floats in check-yaml (#2545)
• Allow comment-heavy YAML in check-yaml (#2554)
• Sanitize captured terminal output before replay (#2552)

Contributors

• @​j178

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

... (truncated)

Commits

• 432eeb0 Bump version to 0.4.14 (#2571)
• 6b6d429 Update Rust crate ignore to v0.4.33 (#2564)
• 27d0cf8 Update prek hooks (#2555)
• aaf407b Update Rust crate aws-lc-rs to v1.18.0 (#2569)
• 3ddddfd Update Rust crate xml to v1.4.0 (#2570)
• fc90ec6 Update Rust crate similar to v3.1.2 (#2567)
• 50e60d4 Update Rust crate thiserror to v2.0.20 (#2568)
• 70a4c06 Update Rust crate liblzma to v0.4.8 (#2565)
• 7b8dcaa Update Rust crate globset to v0.4.20 (#2563)
• 3e075d3 Update Rust crate clap_complete to v4.6.9 (#2562)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[d33bs]

CI checks pass.