Bicep includes its version and a hash of the template as metadata
    in the file produced when running `bicep build`. Different versions
    of bicep-cli produce differing values for those fields, which
    can break `pre-commit run --all` when run against changes that
    don't touch any bicep files.

    Pinning bicep-cli should keep those fields consistent until
    bicep is intentionally upgraded.