Update prek dependencies (#23980)

This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[astral-sh/ruff-pre-commit](https://redirect.github.com/astral-sh/ruff-pre-commit)
| repository | patch | `v0.15.4` → `v0.15.5` | `v0.15.6` |
|
[igorshubovych/markdownlint-cli](https://redirect.github.com/igorshubovych/markdownlint-cli)
| repository | minor | `v0.47.0` → `v0.48.0` | |
|
[zizmorcore/zizmor-pre-commit](https://redirect.github.com/zizmorcore/zizmor-pre-commit)
| repository | minor | `v1.22.0` → `v1.23.1` | |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://redirect.github.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>astral-sh/ruff-pre-commit (astral-sh/ruff-pre-commit)</summary>

###
[`v0.15.5`](https://redirect.github.com/astral-sh/ruff-pre-commit/releases/tag/v0.15.5)

[Compare
Source](https://redirect.github.com/astral-sh/ruff-pre-commit/compare/v0.15.4...v0.15.5)

See: <https://github.com/astral-sh/ruff/releases/tag/0.15.5>

</details>

<details>
<summary>igorshubovych/markdownlint-cli
(igorshubovych/markdownlint-cli)</summary>

###
[`v0.48.0`](https://redirect.github.com/igorshubovych/markdownlint-cli/releases/tag/v0.48.0)

[Compare
Source](https://redirect.github.com/igorshubovych/markdownlint-cli/compare/v0.47.0...v0.48.0)

- Update all dependencies via `Dependabot`

</details>

<details>
<summary>zizmorcore/zizmor-pre-commit
(zizmorcore/zizmor-pre-commit)</summary>

###
[`v1.23.1`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.1)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.23.0...v1.23.1)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.1>

###
[`v1.23.0`](https://redirect.github.com/zizmorcore/zizmor-pre-commit/releases/tag/v1.23.0)

[Compare
Source](https://redirect.github.com/zizmorcore/zizmor-pre-commit/compare/v1.22.0...v1.23.0)

See: <https://github.com/zizmorcore/zizmor/releases/tag/v1.23.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/astral-sh/ruff).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW50ZXJuYWwiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Charlie Marsh <charlie.r.marsh@gmail.com>

Author: renovate[bot]

.github/zizmor.yml

@@ -0,0 +1,10 @@
+rules:
+  # TODO(charlie): Move these workflows to use dedicated GitHub environments.
+  secrets-outside-env:
+    ignore:
+      - notify-dependents.yml
+      - publish-docs.yml
+      - publish-playground.yml
+      - publish-ty-playground.yml
+      - publish-versions.yml
+      - publish-wasm.yml

.pre-commit-config.yaml

@@ -71,7 +71,7 @@ repos:
   # zizmor detects security vulnerabilities in GitHub Actions workflows.
   # Additional configuration for the tool is found in `.github/zizmor.yml`
   - repo: https://github.com/zizmorcore/zizmor-pre-commit
-    rev: v1.22.0
+    rev: v1.23.1
     hooks:
       - id: zizmor
         priority: 0
@@ -104,7 +104,7 @@ repos:
         priority: 0
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.4
+    rev: v0.15.5
     hooks:
       - id: ruff-format
         exclude: crates/ty_python_semantic/resources/corpus/
@@ -118,7 +118,7 @@ repos:
 
   # Priority 1: Second-pass fixers (e.g., markdownlint-fix runs after mdformat).
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: v0.47.0
+    rev: v0.48.0
     hooks:
       - id: markdownlint-fix
         exclude: |
@@ -130,7 +130,7 @@ repos:
 
   # Priority 2: ruffen-docs runs after markdownlint-fix (both modify markdown).
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.4
+    rev: v0.15.5
     hooks:
       - id: ruff-format
         name: mdtest format