ruff

6d72be26 - Bump zizmor pre-commit hook to the latest version and fix new warnings (#15022)