chore(deps): bump the monthly-batch group with 3 updates

[dependabot]

Bumps the monthly-batch group with 3 updates: https://github.com/DavidAnson/markdownlint-cli2, https://github.com/scop/pre-commit-shfmt and https://github.com/woodruffw/zizmor-pre-commit.

Updates https://github.com/DavidAnson/markdownlint-cli2 from v0.23.2 to 0.23.3

Changelog

Sourced from https://github.com/DavidAnson/markdownlint-cli2's changelog.

0.23.3

• Update dependencies

Commits

• 916ad0a Update to version 0.23.3.
• ed9cb41 Freshen list of external custom rules included with the markdownlint-cli2-rul...
• 3fe0056 Remove test-main suite now that test-fs runs all the same tests (except 1 whi...
• d52a859 Update test case infrastructure to be able to run "require" tests when using ...
• 8a4b4be Bump eslint-plugin-jsdoc from 64.3.5 to 64.3.6
• 578caa6 Update OutputFormatterOptions to include an FsPromisesLike parameter so outpu...
• 018d1eb Update indirect playwright dependencies.
• a3a26a8 Bump @​playwright/test from 1.62.1 to 1.63.0
• 75e7193 Bump eslint-plugin-jsdoc from 64.3.3 to 64.3.5
• f1a6823 Bump eslint from 10.9.1 to 10.10.0
• Additional commits viewable in compare view

Updates https://github.com/scop/pre-commit-shfmt from v3.13.1-1 to 3.14.1.pre.1

Commits

• 479be59 Merge pull request #89 from scop/renovate/mvdan-sh-3.x
• 742a8c6 chore: update rest of metadata for 3.14.1
• 19f8de6 chore(deps): update mvdan/sh to v3.14.1
• 1712837 chore(deps): update github/codeql-action action to v4.37.9 (#90)
• ba9cffc chore(deps): update github/codeql-action action to v4.37.8 (#88)
• ddaf20b chore(deps): update github/codeql-action action to v4.37.7 (#87)
• ef6310b chore(deps): update github/codeql-action action to v4.37.6 (#86)
• 72f6629 chore(deps): update github/codeql-action action to v4.37.5 (#85)
• 20e1c50 chore(deps): update github/codeql-action action to v4.37.4 (#84)
• a1e17aa chore(deps): update ossf/scorecard-action action to v2.4.4
• Additional commits viewable in compare view

Updates https://github.com/woodruffw/zizmor-pre-commit from v1.29.0 to 1.30.1

Release notes

Sourced from https://github.com/woodruffw/zizmor-pre-commit's releases.

v1.30.1

Sponsorship is appreciated!

Bug Fixes 🐛🔗

• Fixed a bug where zizmor would crash on pre-commit inputs that reference a GitHub URL with an explicit .git suffix (#2363)

• Fixed a bug where self-repository auto-fixes were incorrectly marked as "safe" instead of "unsafe" (#2373)

v1.30.0

Sponsorship is appreciated!

New Features 🌈🔗

• New audit: self-repository detects usages of the old "workspace-relative" form for local reusable workflows and actions and recommends the new "self-repository" form instead (#2271) Enhancements 🌱🔗

• The impostor-commit audit now supports pre-commit config inputs (#2256)

• The forbidden-uses audit now supports pre-commit config inputs (#2263)

• The adhoc-packages audit now detects more ad-hoc package management patterns, including bundle add and yarn add

  Many thanks to @​connorshea for proposing and implementing this enhancement!

• The archived-uses audit now supports pre-commit config inputs (#2272)

• The ref-confusion audit now supports pre-commit config inputs (#2274)

• The cache-poisoning audit now produces more detailed and more precise diagnostics (#2330)

• The cache-poisoning audit now handles and exposes auto-fixes in a more general manner (#2332)

• zizmor now recognizes sethvargo/ratchet version comments when evaluating ref pinning (#2319)

  Many thanks to @​njgudman for proposing and implementing this enhancement!

• The unpinned-tools audit now produces more detailed and more precise diagnostics (#2339)

• The unpinned-tools audit now detects usages of extractions/setup-just (#2339)

• The unpinned-tools audit now detects usages of extractions/setup-crate (#2340)

• The archived-uses audit now detects several more archived repositories (#2340)

• The ref-version-mismatch audit now supports uses: that reference reusable workflows (#2344)

• The stale-action-refs audit now supports uses: that reference reusable workflows (#2345)

Bug Fixes 🐛🔗

... (truncated)

Commits

• fa41207 Mirror: 1.30.1
• 7361a0b fix: include pre-commit files in hook (#59)
• 34c5ce3 Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the github-actions group...
• cef8b83 Mirror: 1.30.0
• 2e74fc1 Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group (#61)
• 7bb2343 Bump zizmorcore/zizmor-action in the github-actions group (#58)
• 950796f chore: replace pre-commit checks with zizmor-action (#57)
• a5dde09 chore: freeze pin commit hooks, bump usage of own hook (#56)
• a21d6cd Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 in the github-actions group (#55)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions