fix: Use git to derive changed files instead

tj-actions is no longer recommended

CVE-2025-30066

Author: LukeRepko

.github/workflows/pre-commit.yaml

@@ -16,12 +16,17 @@ jobs:
         uses: actions/setup-python@v2
         with:
           python-version: ${{ matrix.python-version }}
-      - name: Get changed files
+      - name: Fetch all branches and tags
+        run: git fetch --prune --unshallow
+      - name: Determine changed files
         id: changed-files
-        uses: tj-actions/[email protected]
+        run: |
+          CHANGED_FILES=$(git diff --name-only HEAD^ | xargs)
+          echo "Changed files: $CHANGED_FILES"
+          echo "CHANGED_FILES=$CHANGED_FILES" >> $GITHUB_ENV
       - name: Run Check
         uses: pre-commit/[email protected]
         with:
           extra_args: >-
-            --files ${{ steps.changed-files.outputs.all_changed_files }}
+            --files ${{ env.CHANGED_FILES }}
             --hook-stage manual