Bump and pin pre-commit hooks to immutable hashes

Author: hugovk

.pre-commit-config.yaml

@@ -6,7 +6,7 @@ priorities:
 
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v6.0.0
+    rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c  # frozen: v6.0.0
     hooks:
       - id: check-added-large-files
         args: [--maxkb=500]
@@ -26,33 +26,33 @@ repos:
         priority: fix-whitespace
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.37.0
+    rev: 0494aa7fa1314e98913a41227d8f0a515b2c1049  # frozen: 0.38.2
     hooks:
       - id: check-dependabot
         priority: check
       - id: check-github-workflows
         priority: check
 
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.7.11
+    rev: 914e7df21a07ef503a81201c76d2b11c789d3fca  # frozen: v1.7.12
     hooks:
       - id: actionlint
         priority: check
 
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.23.1
+    rev: fa412071e4f5d44d44f9e365f4676f9df92456a2  # frozen: v1.30.1
     hooks:
       - id: zizmor
         priority: check
 
   - repo: https://github.com/crate-ci/typos
-    rev: v1.44.0
+    rev: 00f422f3b19c57bc6338715ebfe3316d38768461  # frozen: v1.50.3
     hooks:
       - id: typos
         priority: check
 
   - repo: https://github.com/oxc-project/mirrors-oxlint
-    rev: v1.55.0
+    rev: 7ab19fc41bc7c63cb01d4322509971371c285e16  # frozen: v1.85.0
     hooks:
       - id: oxlint
         priority: check