chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.15

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:evilmartians/lefthook	tools	patch	2.1.9 → 2.1.15	2.2.1 (+3)

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.15

Compare Source

• fix: do not pipe stdin into post-checkout git-lfs hook (#​1523) by @​rwinkelman
• fix: remove color blending (#​1558) by @​mrexox
• fix: resolve push-files fallback against the remote-tracking ref (#​1485) by @​hamodywe
• test: regression for valid fish shell completion output (#​1527) by @​rwinkelman
• fix: sanitize slashes in remote ref when building the checkout dir name (#​1486) by @​hamodywe
• fix: quote paths in the generated hook shim (#​1509) by @​addielaruee
• feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#​1547) by @​Yash121l

v2.1.14

Compare Source

• fix: error when --job/--command matches nothing (#​1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#​1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#​1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#​1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#​1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#​1510) by @​hamodywe
• docs: quote template run examples (#​1472) by @​Guflly

v2.1.13

Compare Source

• fix: error when --job/--command matches nothing (#​1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#​1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#​1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#​1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#​1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#​1510) by @​hamodywe
• docs: quote template run examples (#​1472) by @​Guflly

v2.1.12

Compare Source

• fix: fail the hook when staging fixed files errors (#​1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#​1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#​1508) by @​mariokresic

v2.1.11

Compare Source

• fix: inherit terminal size for PTY commands (#​1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#​1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#​1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#​1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#​1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#​1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#​1477) by @​scop
• docs: document script args (#​1479) by @​lntutor
• docs: update em logo by @​mrexox

v2.1.10

Compare Source

• deps: July 2026 (#​1463) by @​mrexox
• feat: AI coding agents integration (#​1448) by @​viralpraxis
• docs: fix language (#​1453) by @​pflanze
• fix: make test suite stable when NO_COLOR is set (#​1449) by @​viralpraxis
• deps: June 2026 (#​1447) by @​mrexox
• deps: migrate shellescape to al.essio.dev/pkg/shellescape (#​1443) by @​maguowei
• docs: upgrade docmd (#​1442) by @​mrexox
• docs: use single quotes in example to handle filepaths with $ by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Jump: v2.1.9 → v2.1.15 (6 patch releases)

Major Changes:

• v2.1.10: AI coding agents integration, dependency migration (shellescape library)
• v2.1.11: Terminal size inheritance for PTY commands, Go version bumped to 1.26.6
• v2.1.12: Critical fix for stage_fixed behavior - now properly fails hooks when staging errors occur
• v2.1.13/14: TTY detection improvements, color handling enhancements, file_types path resolution fixes
• v2.1.15: Path quoting in hook shims, color propagation via CLICOLOR_FORCE, stdin handling fixes

Breaking Changes: None identified. All changes are backward-compatible bug fixes and enhancements.

Security & Bug Fixes:

• Path sanitization (#1486, #1509): Improved handling of special characters in paths (slashes, spaces)
• stage_fixed reliability (#1484): Hook now correctly fails when git staging operations error
• TTY detection (#1545): Prevents terminal-specific operations when stdout is not a TTY
• File path resolution (#1537): Fixes file_types paths to correctly resolve from repository root

Relevant Improvements for This Codebase:

• stage_fixed: true used in lefthook.yml:4 - v2.1.12 fixes critical bug where staging errors were silently ignored
• {staged_files} template used in lefthook.yml:15 - v2.1.15 improves path quoting for files with special characters
• glob patterns used throughout - v2.1.13 improves path resolution

🎯 Impact Scope Investigation

Usage Locations:

• mise.toml:4 - Version specification only (changed from 2.1.9 to 2.1.15)
• lefthook.yml - Hook configuration using:
  • stage_fixed: true on pre-commit fmt command
  • {staged_files} template variable on hadolint command
  • glob patterns on all commands
  • Standard run commands

Configuration Analysis:
The repository uses standard lefthook features that remain fully compatible:

• ✅ pre-commit and pre-push hooks
• ✅ stage_fixed directive (benefits from v2.1.12 fix)
• ✅ {staged_files} template variable (benefits from v2.1.15 path quoting)
• ✅ glob patterns for file filtering
• ✅ run commands for executing tools

Dependency Impact: None. Lefthook is a development tool managed by mise. No runtime dependencies or API changes affect the codebase.

CI/CD Impact: Lefthook is not used in GitHub Actions workflows (.github/workflows/ci.yml runs tools directly). Updates only affect local developer environments and git hooks.

💡 Recommended Actions

Immediate Actions: None required. The update is safe to merge as-is.

Post-Merge: Developers should run mise install to update their local lefthook installation.

Testing Recommendations:

1. Verify pre-commit hooks work correctly: git commit with staged Go files
2. Verify stage_fixed behavior: Make a formatting change that go fmt auto-fixes
3. Verify {staged_files} works: Stage Dockerfile changes and commit

Benefits of This Update:

• More reliable git hooks: The v2.1.12 fix ensures stage_fixed properly fails when staging operations encounter errors, preventing silent failures
• Better path handling: Files with spaces or special characters in names will be handled more robustly
• Improved terminal handling: Better behavior in non-TTY environments (CI, scripts, etc.)

🔗 Reference Links

• Lefthook v2.1.15 Changelog
• Lefthook v2.1.10 Changelog
• GitHub Repository
• PR #1484 - stage_fixed fix
• PR #1509 - path quoting fix

Generated by koki-develop/claude-renovate-review