Dependabot does not update .pre-commit-config.yaml

[StevenMaude]

This repository has an auto-merge Dependabot PR workflow. For the Python tooling we use — for example, black, flake8, isort — versions are specified in both requirements files, and the .pre-commit-config.yaml.

Why is this an issue? The two specified versions may get out of sync, unless the .pre-commit-config.yaml is manually updated. If versions do get out of sync, there's a small risk that they have conflicting behaviour. For example, the linter/formatter installed from requirements thinks some code is perfectly fine, but the pre-commit version doesn't.

A workaround that others use is to maintain sync is to have another workflow running pre-commit autoupdate on a schedule.

There is a Dependabot feature request. At time of writing, the request is approaching its third birthday.

[amarvin]

Relates to dependabot/dependabot-core#1524