`sha` was renamed to `rev` in pre-commit 1.9.0. This also changes URLs to use https:// instead of git://, which works better behind a firewall.