ci: sync CI workflow

Author: wpfleger-release-bot[bot]

.hooks/pre-commit

@@ -6,7 +6,17 @@ set -euo pipefail
 
 UNSTAGED_BEFORE=$(git diff --name-only 2>/dev/null || true)
 
-just pre-commit
+# Strip repo-scoped git env vars from `just pre-commit` so subprocess git
+# operations (uv clones, pytest git fixtures, go builds) don't inherit
+# GIT_INDEX_FILE/GIT_DIR and write into the invoking repo's index.
+# The git diff/add calls below keep their env vars and work correctly.
+env -u GIT_ALTERNATE_OBJECT_DIRECTORIES -u GIT_COMMON_DIR -u GIT_CONFIG \
+    -u GIT_CONFIG_PARAMETERS -u GIT_DIR -u GIT_GRAFT_FILE \
+    -u GIT_IMPLICIT_WORK_TREE -u GIT_INDEX_FILE \
+    -u GIT_INTERNAL_SUPER_PREFIX -u GIT_NO_REPLACE_OBJECTS \
+    -u GIT_OBJECT_DIRECTORY -u GIT_PREFIX -u GIT_REPLACE_REF_BASE \
+    -u GIT_SHALLOW_FILE -u GIT_WORK_TREE \
+    just pre-commit
 
 while IFS= read -r file; do
     if [ -n "$file" ] && [ -f "$file" ]; then