.pre-commit-config.yaml

default_install_hook_types:
  - pre-commit
  - post-checkout
  - post-merge
  - post-rewrite

repos:

- repo: https://github.com/pre-commit/pre-commit-hooks
  rev: v5.0.0
  hooks:
  - id: check-yaml
  - id: end-of-file-fixer
  - id: trailing-whitespace

- repo: https://github.com/astral-sh/uv-pre-commit
  rev: 0.5.20
  hooks:
    - id: uv-sync
      name: "synchronize pyproject.toml dependencies"
      args: [ "--locked", "--all-packages" ]
    - id: uv-lock
      name: "ensure uv.lock file is up-to-date"
    - id: uv-export
      name: "export requirements.txt"
      args: [ "--frozen", "--no-dev", "--no-hashes", "-o", "requirements.txt" ]
      verbose: false
    - id: uv-export
      name: "export requirements-dev.txt"
      args: [ "--frozen", "--only-dev", "--no-hashes", "-o", "requirements-dev.txt" ]
      verbose: false

#- repo: https://github.com/pypa/pip-audit
#  rev: v2.7.3
#  hooks:
#  - id: pip-audit
#    name: "Audit dependencies"
#    args: ["-r", "requirements.txt"]
#    verbose: true
#  - id: pip-audit
#    name: "Audit dev dependencies"
#    args: ["-r", "requirements-dev.txt"]
#    verbose: true
#ci:
#  skip: [pip-audit]