See #1150, it might be useful to have some automation which can bump the versions for the pre-commit dependencies and automatically notify us of this. We should look at how easy this is to set up (dependabotmight be helpful, since it serves a similar purpose), and if it's worth pursuing (caveats mentioned in the PR).