build(hooks): update pre-commit hooks

[DRL-NextGen]

Updated pre-commit hooks

Hook	From	To
ruff-pre-commit	0.15.20	0.16.5
codespell	2.4.2	2.4.3
uv-pre-commit	0.11.26	0.12.7
markdownlint-cli2	0.23.0	0.23.2
tombi-pre-commit	1.2.0	1.5.0

[DRL-NextGen]

Checks Summary

Last run: 2026-08-31T12:27:04.238Z

Mend Unified Agent vulnerability scan found 9 vulnerabilities:

Severity	Identifier	Package	Details	Fix
🔺 High	CVE-2026-65918	torchvision-0.26.0-cp312-cp312-manylinux_2_28_x86_64.whl	PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vul... PyTorch torchvision through 0.28.0, fixed in commit 4e05dc2, contains an out-of-bounds heap read vulnerability in the GIF decoder's read_from_tensor callback that passes unclamped length to memcpy. Attackers can supply malicious or truncated GIF files to cause denial of service via segmentation fault or disclose adjacent heap memory contents.	Not Available
🔺 High	CVE-2026-58659	lightning-2.6.5-py3-none-any.whl	PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerabi... PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass weights_only=True protections to execute arbitrary code when LightningModule.load_from_checkpoint is called.	Not Available
🔷 Medium	CVE-2025-3000	torch-2.11.0-cp312-cp312-manylinux_2_28_x86_64.whl	A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function to... A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.	torch - 2.13.0
🔷 Medium	CVE-2026-59890	setuptools-80.10.2-py3-none-any.whl	setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python... setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0.	Upgrade to version setuptools - 83.0.0,setuptools - 83.0.0,https://github.com/pypa/setuptools.git - 83.0.0
🔷 Medium	CVE-2026-78684	vllm-0.26.0-cp38-abi3-manylinux_2_28_x86_64.whl	vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enfo... vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in its decode path. Unauthenticated attackers can activate DeepStream at request time to initialize the process-wide GPU decode pool and submit video that bypasses resource controls, causing partial denial of service for concurrent requests.	Upgrade to version https://github.com/vllm-project/vllm.git - v0.28.0
🔷 Medium	CVE-2026-73558	vllm-0.26.0-cp38-abi3-manylinux_2_28_x86_64.whl	vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overf... vLLM is an inference and serving engine for large language models. Prior to 0.27.0, an integer overflow in blockIdx.x * 2 * d in activation_kernels.cu can cause act_and_mul_kernel to consume another batched user's input, allowing a request processed in the same inference batch to receive a partial or complete copy of another user's inference result. This issue is fixed in version 0.27.0.	Upgrade to version https://github.com/vllm-project/vllm.git - v0.27.0,vllm - 0.27.0,vllm - 0.27.0
🔷 Medium	CVE-2026-65920	diffusers-0.39.0-py3-none-any.whl	Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _g... Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary files by supplying malicious weight_map values in model index JSON. Attackers can use ../ sequences or absolute paths in weight_map entries to escape the model directory and read safetensors files outside the intended location during model loading.	Not Available
🔷 Medium	CVE-2026-75104	transformers-5.14.1-py3-none-any.whl	Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing atta... Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.	Not Available
🔸 Low	CVE-2025-63396	torch-2.11.0-cp312-cp312-manylinux_2_28_x86_64.whl	An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.prof... An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).	Not Available