Landlock updates

.github/workflows/CI.yml

@@ -64,7 +64,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
         os: [ubuntu-latest, macOS-latest]
     steps:
       - uses: actions/checkout@v3
@@ -104,8 +104,6 @@ jobs:
           cache-dependency-path: |
             ./pdm.lock
             ./Cargo.lock
-      - name: Work around requests bug https://github.com/psf/requests/issues/6437
-        run: pip install --force requests==2.29.0
       - uses: actions-rust-lang/setup-rust-toolchain@v1
       - name: Install dependencies
         run: |

.pre-commit-config.yaml

@@ -9,18 +9,33 @@ repos:
       - id: check-yaml
       - id: check-added-large-files
 
-  - repo: https://github.com/charliermarsh/ruff-pre-commit
-    rev: "v0.0.264"
+  - repo: local
     hooks:
       - id: ruff
         name: Check python (ruff)
-        args: [--show-source, --fix, --exit-non-zero-on-fix]
-
-  - repo: https://github.com/psf/black
-    rev: 23.1.0
-    hooks:
-      - id: black
-        name: Check black
+        language: system
+        types_or: [python, pyi]
+        require_serial: true
+        entry: pdm run ruff check --force-exclude
+        args:
+          [--output-format=full, --fix, --show-fixes, --exit-non-zero-on-fix]
+      - id: ruff-format
+        name: Format python (ruff)
+        language: system
+        types_or: [python, pyi]
+        require_serial: true
+        entry: pdm run ruff format --force-exclude
+      - id: nixfmt
+        name: Format Nix (nixfmt)
+        types: [nix]
+        language: system
+        require_serial: true
+        entry: bash -c 'command -v nix && nix "$@" || echo "skipping nixfmt"' nix
+        args:
+          - --experimental-features
+          - nix-command flakes
+          - --accept-flake-config
+          - fmt
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
     rev: 0.21.0