chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.9

[renovate]

This PR contains the following updates:

Package	Update	Change
aqua:evilmartians/lefthook	patch	2.1.6 → 2.1.9

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.9

Compare Source

• fix: update hooks path after resetting (#​1431) by @​mrexox
• deps: May 2026 (#​1415) by @​mrexox

v2.1.8

Compare Source

• fix: do not warn if local hooks path is equal to default hooks path (#​1421) by @​mrexox

v2.1.7

Compare Source

• fix: use contrast colors (#​1420) by @​mrexox
• fix: apply stage_fixed only if it is safe (#​1418) by @​mrexox
• fix: try to always restore unstaged changes (#​1417) by @​mrexox
• fix: always restore unstaged changes (#​1416) by @​mrexox
• refactor: add new logger without a global state (#​1385) by @​mrexox
• fix: linter, sacrifice optimization for readability by @​mrexox
• fix: separate fallback push branch from pathspecs (#​1396) by @​lawrence3699

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Changes: 2.1.6 → 2.1.9 (3 patch releases)

v2.1.9 (2026-05-29):

• Fix: Update hooks path after resetting - resolves issues with hook paths not being properly refreshed following reset operations
• Dependency updates for May 2026

v2.1.8 (2026-05-19):

• Fix: Do not warn if local hooks path is equal to default hooks path - eliminates unnecessary warnings during standard configurations

v2.1.7 (2026-05-19):

• Fix: Apply stage_fixed only if it is safe - enhanced safety checks for staged file operations (addresses #1400: preventing loss of staged files/changes when hooks fail or get interrupted)
• Fix: Try to always restore unstaged changes and always restore unstaged changes - strengthened recovery mechanisms for git state management
• Fix: Use contrast colors - improved accessibility in terminal output
• Refactor: Add new logger without a global state - improved code architecture (internal change, no API impact)
• Fix: Separate fallback push branch from pathspecs - improved git branch handling logic

Breaking Changes: None identified

Security Fixes: No security advisories published for any lefthook version

🎯 Impact Scope Investigation

Direct Usage in Codebase:

• Configuration file: lefthook.yml:4 uses stage_fixed: true in the pre-commit fmt command
• This project uses lefthook via mise (aqua backend) as defined in mise.toml:4
• lefthook executes pre-commit hooks: go fmt, golangci-lint run, gitleaks git --pre-commit --staged, hadolint
• lefthook executes pre-push hooks: gitleaks git

Critical Finding:

• The stage_fixed: true setting in lefthook.yml:4 directly benefits from v2.1.7's safety improvements
• PR #1418 adds validation to prevent loss of staged/unstaged changes when hooks fail - this is a bug fix that improves safety for this project's existing configuration
• No configuration changes required - the improvement is backward compatible

Impact on Other Dependencies: None - lefthook is a development tool that doesn't affect runtime dependencies

Configuration Impact: None - existing lefthook.yml configuration remains fully compatible

💡 Recommended Actions

Immediate Actions:

• ✅ Safe to merge immediately
• No code changes required
• No configuration updates needed
• Run mise install after merge to install the updated lefthook version

Post-Merge Verification:

• Verify lefthook executes correctly by triggering a pre-commit hook (e.g., stage a Go file and commit)
• Confirm the stage_fixed behavior works properly (fmt command should auto-stage formatted files)

Benefits of This Update:

• Improved safety for stage_fixed: true configuration used in the fmt command
• Better git state management and unstaged change restoration
• Elimination of unnecessary warnings about hooks paths
• Improved terminal output readability with contrast colors

🔗 Reference Links

• Lefthook v2.1.9 Release
• Lefthook v2.1.8 Release
• Lefthook v2.1.7 Release
• CHANGELOG
• PR #1418: stage_fixed safety improvements
• Lefthook Repository

Generated by koki-develop/claude-renovate-review