This PR contains the following updates:

Release Notes

v0.4.11

Compare Source

Released on 2026-07-25.

Highlights

• This release adds two new builtin hooks, deny-pattern and require-pattern,
  as native alternatives for pygrep use cases. deny-pattern fails when a
  configured pattern is found, while require-pattern ensures every selected
  file contains a match. By matching natively without spawning a Python
  subprocess, they run over 4x faster than pygrep in benchmarks. Note that
  they use
  Rust regex syntax, which does
  not support look-around features such as negative lookbehind.

• prek run now supports --glob <PATTERN> to run hooks on tracked files
  matching a glob. It can be repeated or combined with --files and
  --directory.

• Hook priorities now support reusable aliases:

  [priorities]
  checks = 10
  
  [[repos]]
  repo = "builtin"
  hooks = [
    { id = "check-json", priority = "checks" },
    { id = "check-yaml", priority = "checks" },
  ]

  This makes parallel scheduling easier to read and maintain.

Enhancements

• Add deny-pattern and require-pattern builtin hooks (#​2359)
• Support --glob patterns in prek run (#​2381)
• Support reusable aliases for hook priorities (#​2331)
• Implement requirements-txt-fixer as a builtin hook (#​2390)
• Improve user-facing warnings and errors (#​2380)
• Install Node hooks through git url (#​2394)

Performance

• Reduce blocking-pool overhead in file hooks (#​2384)
• Speed up mixed-line-ending scans with memchr2 (#​2391)

Bug fixes

• Honor filenames in builtin hook entry and args (#​2389)
• Match identify tags across filename parts (#​2399)
• Preserve hook output order with a shared pipe (#​2385)
• Preserve system download policy when applying metadata (#​2395)

Contributors

• @​j178
• @​chrisoro

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

• If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.