chore(pre-commit): bump the pre-commit-hooks group across 1 directory with 2 updates

[dependabot]

Bumps the pre-commit-hooks group with 2 updates in the / directory: https://github.com/charliermarsh/ruff-pre-commit and https://github.com/betterleaks/betterleaks.

Updates https://github.com/charliermarsh/ruff-pre-commit from v0.15.18 to 0.15.20

Release notes

Sourced from https://github.com/charliermarsh/ruff-pre-commit's releases.

v0.15.20

See: https://github.com/astral-sh/ruff/releases/tag/0.15.20

v0.15.19

See: https://github.com/astral-sh/ruff/releases/tag/0.15.19

Commits

• c59bba8 Mirror: 0.15.20
• 745be04 Mirror: 0.15.19
• 998dc2b fix: update prek rev in README.md during mirror (#172)
• See full diff in compare view

Updates https://github.com/betterleaks/betterleaks from v1.5.0 to 1.6.1

Release notes

Sourced from https://github.com/betterleaks/betterleaks's releases.

v1.6.1

Changelog

• 28f08b4c8c4420a601f67ee9887c201697ff4568 config command (#218)
• 228352ff340c6861f64482a8a5adbc5dd80c3ace build: upgrade crypto to v0.53.0 (#217)

v1.6.0

What's New

v1.6.0 focuses on faster startup, lower cold-scan overhead, and the migration of Betterleaks’ expression runtime from CEL to Expr.

• Replaced CEL-based filtering and validation with Expr. Existing CEL-shaped configs are still accepted for compatibility, but new configs should use Expr syntax.
• Improved cold-start performance by lazily initializing expensive runtime work (160ms -> 20ms) :
  • regex compilation
  • global finding filters
  • per-rule filters
  • validation expressions
  • cl100k_base tokenizer loading
• Added rule specificity support for more accurate generic-rule suppression. More specific rules now run first and can suppress lower-specificity generic matches earlier.
• Switched keyword prefiltering to github.com/RRethy/ahocorasick. (faster startup, less mem)
• Added lazy regex compilation while preserving early regex validation.
• Added --validation-debug support with safer redaction of sensitive HTTP headers.
• Reduced dependency weight by removing cel-go and related protobuf/genproto dependencies. Release binary size goes from 30MB to 22.7MB.

Note on CEL vs Expr and compatibility

When filtering and validation logic was implemented in CEL I was unaware of expr-lang. Expr provides all the bells and whistles that CEL provided but at a smaller cost. Expr is slightly faster and a much smaller dependency.

• Existing CEL-style configs remain supported through compatibility handling.
• New configs should prefer Expr syntax.
• The deprecated allowlist translation path remains available.

What's Changed

• Lazy load patterns, cl100k_base tokenizer, swap CEL for expr by @​zricethezav in betterleaks/betterleaks#215

Full Changelog: betterleaks/betterleaks@v1.5.0...v1.6.0

Commits

• 28f08b4 config command (#218)
• 228352f build: upgrade crypto to v0.53.0 (#217)
• 6475f3f Lazy load patterns, cl100k_base tokenizer, swap CEL for expr (#215)
• See full diff in compare view