[GH-3011] Pin all pre-commit hooks to SHA for supply chain security

[jbampton]

Did you read the Contributor Guide?

• Yes, I have read the Contributor Rules and Contributor Development Guide

Is this PR related to a ticket?

• Yes, and the PR name follows the format [GH-XXX] my subject. Closes We need to pin to sha all pre-commit hooks for supply chain security #3011

What changes were proposed in this PR?

Pinned all hooks to latest SHA for supply chain security.

Using prek now so set minimum_prek_version similar to Apache Airflow:

https://github.com/apache/airflow/blob/b788d83d215ec9fe6b289c3021a726997ca3d8a3/.pre-commit-config.yaml#L19

Updated additional dependency version for Prettier

How was this patch tested?

With prek

Did this PR include necessary documentation updates?

• No, this PR does not affect any public API so no need to change the documentation.

[Copilot]

Pull request overview

This PR strengthens the repository’s pre-commit/prek supply-chain posture by pinning hook revisions to immutable commit SHAs (with # frozen: hints for Dependabot), while also updating the configured minimum prek version and a Prettier dependency.

Changes:

• Converted all third-party hook rev values from tags to full commit SHAs and added # frozen: version hints for Dependabot.
• Switched the config’s minimum version gate from minimum_pre_commit_version to minimum_prek_version.
• Bumped the local Prettier hook dependency from prettier@3.8.3 to prettier@3.8.4.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.