.pre-commit-config.yaml

default_language_version:
  python: python3

default_stages: [ pre-commit, pre-push ]

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v5.0.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-yaml
        args: ["--unsafe"]
      - id: check-json
      - id: check-toml
      - id: check-added-large-files
      - id: check-merge-conflict
      - id: check-vcs-permalinks
      - id: debug-statements
      - id: detect-private-key
      - id: name-tests-test
        exclude: ^tests/resources/
      - id: trailing-whitespace
      - id: detect-aws-credentials
        args: [ "--allow-missing-credentials" ]

  - repo: https://github.com/Yelp/detect-secrets
    rev: v1.5.0
    hooks:
      - id: detect-secrets
        args: [ '--baseline', '.secrets.baseline' ]

  - repo: https://github.com/sirosen/texthooks
    rev: 0.6.7
    hooks: [ { id: fix-smartquotes }, { id: fix-ligatures } ]

  - repo: https://github.com/astral-sh/ruff-pre-commit
    rev: 'v0.7.3'
    hooks:
      - id: ruff
        args: [ --fix, --exit-non-zero-on-fix ]
      - id: ruff-format

  - repo: https://github.com/PyCQA/bandit/
    rev: 1.7.10
    hooks:
      - id: bandit
        args: [ "-c", "pyproject.toml" ]
        additional_dependencies: [ "bandit[toml]" ]

#  - repo: https://github.com/adamchainz/blacken-docs
#    rev: 1.13.0
#    hooks:
#      - id: blacken-docs
#        additional_dependencies:
#          - black==22.12.0