[pre-commit.ci] pre-commit autoupdate

[pre-commit-ci]

updates:

• github.com/astral-sh/ruff-pre-commit: v0.16.1 → v0.16.10
• github.com/shellcheck-py/shellcheck-py: v0.11.0.1 → v0.11.0.1-1
• github.com/zizmorcore/zizmor-pre-commit: v1.29.0 → v1.30.1
• github.com/rapidsai/pre-commit-hooks: v1.6.1 → v1.7.0

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[jameslamb]

/ok to test 0135b37

[jameslamb]

The latest zizmor flags these.

help[self-repository]: use GitHub's dedicated self-repository syntax
  --> .github/workflows/publish.yml:30:11
   |
23 |   docker:
   |   ------ this job
...
30 |     uses: ./.github/workflows/build-test-publish-images.yml
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix

I like it!

See https://github.blog/changelog/2026-07-30-reference-same-repository-actions-with-self-repository-syntax/

Part of the goal is to avoid source checkouts and unfortunately we still can't do that because we rely on parsing files in source control within these workflows. But still a nice change to adopt.

[jameslamb]

/merge

[jameslamb]

This is failing like this:

22.62   - nothing provides libxgboost 3.3.0.* rapidsai_h* needed by rapids-xgboost-26.10.00a7-cuda12_260910192949_411cc434
22.62 
22.62 Could not solve for environment specs
22.62 The following package could not be installed
22.62 └─ rapids =26.10 * is not installable because it requires
22.62    └─ rapids-xgboost =26.10 *, which requires
22.62       └─ libxgboost =3.3.0 rapidsai_h*, which does not exist (perhaps a missing channel).

(build link)

Should be fixed once rapidsai/integration#868 is resolved.

[jameslamb]

/ok to test d51b51b

[jameslamb]

The check-nightly-ci failures here are weird.

The job was not started because it repeatedly failed to be acquired (5 attempts).
The job was not started because it repeatedly failed to be acquired (5 attempts).
The job was not started because it repeatedly failed to be acquired (5 attempts).
The job was not started because it repeatedly failed to be acquired (5 attempts).
The job was not started because it repeatedly failed to be acquired (5 attempts).
The job was not started because it repeatedly failed to be acquired (5 attempts).
Internal server error. Correlation ID: caae535a-d1dc-401a-ad76-b06395c95916

https://github.com/rapidsai/docker/actions/runs/37655492666

Might be an artifact of the ongoing GitHub outages the last few days.

This PR only touches pre-commit configuration and pre-commit.ci passed, so I'm going to admin merge this. If we see more PR CI failing we can address that separately.