[pre-commit.ci] pre-commit autoupdate

[pre-commit-ci]

updates:

• github.com/astral-sh/ruff-pre-commit: v0.16.1 → v0.16.6
• github.com/shellcheck-py/shellcheck-py: v0.11.0.1 → v0.11.0.1-1
• github.com/zizmorcore/zizmor-pre-commit: v1.29.0 → v1.30.0

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[jameslamb]

/ok to test 0135b37

[jameslamb]

The latest zizmor flags these.

help[self-repository]: use GitHub's dedicated self-repository syntax
  --> .github/workflows/publish.yml:30:11
   |
23 |   docker:
   |   ------ this job
...
30 |     uses: ./.github/workflows/build-test-publish-images.yml
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use '$/...' instead of './...'
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix

I like it!

See https://github.blog/changelog/2026-07-30-reference-same-repository-actions-with-self-repository-syntax/

Part of the goal is to avoid source checkouts and unfortunately we still can't do that because we rely on parsing files in source control within these workflows. But still a nice change to adopt.

[jameslamb]

/merge

[jameslamb]

This is failing like this:

22.62   - nothing provides libxgboost 3.3.0.* rapidsai_h* needed by rapids-xgboost-26.10.00a7-cuda12_260910192949_411cc434
22.62 
22.62 Could not solve for environment specs
22.62 The following package could not be installed
22.62 └─ rapids =26.10 * is not installable because it requires
22.62    └─ rapids-xgboost =26.10 *, which requires
22.62       └─ libxgboost =3.3.0 rapidsai_h*, which does not exist (perhaps a missing channel).

(build link)

Should be fixed once rapidsai/integration#868 is resolved.