* [pre-commit.ci] pre-commit autoupdate (#5641)

updates:
- [github.com/astral-sh/ruff-pre-commit: v0.9.10 → v0.11.0](astral-sh/ruff-pre-commit@v0.9.10...v0.11.0)

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>

* Revert "Fix transitive subpackage dependency resolution (#5603)"

This reverts commit 49872a5, but keeping tests

* add news

* xfail test

* pre-commit

* test: add test for grpc regression

* fix: need to limit to linux

* fix: specify conda-forge

* test: add 5644 test

* test: try osx-arm64 recipe

* test: ensure cross-compiles

* fix: skip message is wrong

* Xfail recipe

* style: pre-the-commit

* doc: add news

---------

Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Ken Odegard <kodegard@anaconda.com>
Co-authored-by: jaimergp <jaimergp@users.noreply.github.com>

* Downgrade necessary permissions for build script

* Use atomic moves to minimize attack window

* add news

* minimize windows further

* use opener

* Provide new helper context manager to handle atomic writes and permission setting

* pre-commit

* clarify need for umask reset

* use secrets.token_urlsafe with 64 characters

* Revert "Fix transitive subpackage dependency resolution (#5603)" (#5647)

* Update conda_build/utils.py

Co-authored-by: Ken Odegard <kodegard@anaconda.com>

* Update conda_build/utils.py

---------

Co-authored-by: jaimergp <jaimergp@users.noreply.github.com>
Co-authored-by: Matthew R. Becker <beckermr@users.noreply.github.com>