pre-commit: pin dependencies with --freeze

59 · Thiago Perrotta · March 20, 2025, 5:42 p.m.
Summary
The blog post discusses the use of the `--freeze` option in the pre-commit autoupdate command, which replaces git tags with SHAs for upstream hooks, thus enhancing security against supply-chain attacks. It provides a practical guide for developers on how to implement this feature while updating dependencies in their pre-commit configuration.