fix: align pre-commit hook versions and fix actionlint warning

- Update ruff-pre-commit from v0.11.4 to v0.15.7 to match project's
  ruff version, preventing formatting differences between generate script
  and prek's ruff hook
- Update uv-pre-commit from 0.7.2 to 0.11.2 to fix TOML parse error
  on exclude-newer timestamp format
- Quote shell variables in finalized_specs.yml to fix actionlint SC2086

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: rtibblesbot

.github/workflows/finalized_specs.yml

@@ -19,7 +19,7 @@ jobs:
       - id: changes
         # Set outputs using the command.
         run: |
-          echo "modified=$(git diff --name-only --diff-filter=ACMRT ${{ github.event.pull_request.base.sha }} ${{ github.sha }} | grep spec/labels-v1.json$ | xargs)" >> "$GITHUB_OUTPUT"
+          echo "modified=$(git diff --name-only --diff-filter=ACMRT "${{ github.event.pull_request.base.sha }}" "${{ github.sha }}" | grep spec/labels-v1.json$ | xargs)" >> "$GITHUB_OUTPUT"
   unit_test:
     name: Error if finalized spec modified
     needs: change_check

.pre-commit-config.yaml

@@ -19,13 +19,13 @@ repos:
       - id: end-of-file-fixer
         exclude: '^.+?(\.json|\.po)$'
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.4
+    rev: v0.15.7
     hooks:
       - id: ruff
         args: [--fix]
       - id: ruff-format
   - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.7.2
+    rev: 0.11.2
     hooks:
       - id: uv-lock
   - repo: https://github.com/google/yamlfmt