[pre-commit.ci] pre-commit autoupdate (#190)

* [pre-commit.ci] pre-commit autoupdate

updates:
- [github.com/astral-sh/ruff-pre-commit: v0.15.15 → v0.15.16](astral-sh/ruff-pre-commit@v0.15.15...v0.15.16)

* chore: bump pip to 26.1.2 to fix PYSEC-2026-196

Upgrade pip from 26.1 to >=26.1.2 in the dev dependency group to
resolve PYSEC-2026-196, which allowed console_scripts/gui_scripts
entry points to be installed outside the installation directory.

Co-authored-by: aieng-bot <aieng-bot@vectorinstitute.ai>

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: aieng-bot[bot] <aieng-bot@vectorinstitute.ai>

Author: pre-commit-ci[bot]

.pre-commit-config.yaml

@@ -16,7 +16,7 @@ repos:
     - id: check-toml
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: 'v0.15.15'
+    rev: 'v0.15.16'
     hooks:
     - id: ruff-check
       args: [--fix, --exit-non-zero-on-fix]

pyproject.toml

@@ -57,7 +57,8 @@ dev = [
     "mypy>=1.7.0",
     "ruff>=0.3.0",
     "nbqa[toolchain]>=1.7.0",
-    "pip>=26.1",
+    # pip>=26.1.2 fixes PYSEC-2026-196
+    "pip>=26.1.2",
 ]
 docs = [
     "mkdocs>=1.5.0",