fix(ci): replace --require-hashes with pinned versions for pip installs

Author: markuslf

.github/workflows/pre-commit-autoupdate.yml

@@ -23,7 +23,7 @@ jobs:
           python-version: '3.12'
 
       - name: 'Install pre-commit'
-        run: 'pip install --require-hashes --requirement /dev/stdin <<< "pre-commit==4.5.1 --hash=sha256:3b3afd891e97337708c1674210f8eba659b52a38ea5f822ff142d10786221f77"'
+        run: 'pip install pre-commit==4.5.1'
 
       - name: 'Run pre-commit autoupdate'
         run: 'pre-commit autoupdate'

CHANGELOG.md

@@ -8,6 +8,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+* Fix `--require-hashes` pip install in pre-commit autoupdate workflow by using pinned version instead
+
 ### Changed
 
 * Update and extend pre-commit hooks (add `check-added-large-files`, `check-merge-conflict`, `check-yaml`; update all hook versions)