From 66fea1dd3c68418cbc8b2427b43f5e552bc206dc Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 7 Nov 2026 15:45:42 +0000
Subject: [PATCH] chore(deps): update patch and minor updates

---
 .devcontainer/devcontainer.json |  2 +-
 Dockerfile                      | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 3986f93..8c358c2 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -7,7 +7,7 @@
   "workspaceFolder": "/workspace",
   "shutdownAction": "stopCompose",
   "features": {
-    "ghcr.io/devcontainers/features/docker-in-docker:4.1.1": {
+    "ghcr.io/devcontainers/features/docker-in-docker:4.1.3": {
       "moby": false,
       "dockerDashComposeVersion": "v2"
     }
diff --git a/Dockerfile b/Dockerfile
index 2a56494..b780e54 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-# syntax=docker/dockerfile:1.27
+# syntax=docker/dockerfile:1.28
 # Single-stage build: develop (devcontainer). A downstream instance adds its
 # own builder/runner stages on top of this same base image and
 # postCreateCommand structure -- see docs/TEMPLATE.md's "Contents" section.
@@ -6,13 +6,13 @@
 ARG DEBIAN_VERSION=trixie
 
 # renovate: datasource=github-releases depName=j178/prek
-ARG PREK_VERSION=0.5.3
+ARG PREK_VERSION=0.5.10
 
 # renovate: datasource=npm depName=@anthropic-ai/claude-code
-ARG CLAUDE_CODE_VERSION=2.1.278
+ARG CLAUDE_CODE_VERSION=2.1.319
 
 # renovate: datasource=github-releases depName=edouard-claude/snip
-ARG SNIP_VERSION=0.25.2
+ARG SNIP_VERSION=0.26.0
 
 # uv itself isn't a project dependency manager here -- it's only the
 # mechanism scripts/develop.sh uses to install an exact, checksum-verified
@@ -20,20 +20,20 @@ ARG SNIP_VERSION=0.25.2
 # package. Left on PATH afterward; harmless, and an instance that adds
 # Python as its own application runtime can reuse it directly.
 # renovate: datasource=github-releases depName=astral-sh/uv
-ARG UV_VERSION=0.12.17
+ARG UV_VERSION=0.13.7
 
 # python3 is infrastructure tooling, not an application runtime this
 # template assumes: prek needs an interpreter to build the venv for any
 # "language: python" hook (.pre-commit-config.yaml's pre-commit-hooks
 # repo), and .github/scripts/*.py need one directly.
 # renovate: datasource=python-version depName=python
-ARG PYTHON_VERSION=3.14.7
+ARG PYTHON_VERSION=3.15.2
 
 # Node.js is infrastructure tooling too, not an application runtime: npx
 # (the clear-thought MCP server in .mcp.json) is the only thing that
 # needs it.
 # renovate: datasource=node-version depName=node
-ARG NODE_VERSION=24.21.0
+ARG NODE_VERSION=24.22.2
 
 ARG SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
 ARG SSL_CERT_DIR=/etc/ssl/certs