chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.14

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:evilmartians/lefthook	tools	patch	2.1.9 → 2.1.14	2.1.15

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.14

Compare Source

• fix: error when --job/--command matches nothing (#​1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#​1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#​1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#​1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#​1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#​1510) by @​hamodywe
• docs: quote template run examples (#​1472) by @​Guflly

v2.1.13

Compare Source

• fix: error when --job/--command matches nothing (#​1512) by @​nityanand123gupta
• fix: disable tty things when stdout is not TTY (#​1545) by @​mrexox
• docs: document files inheritance for grouped jobs (#​1536) by @​chiliec
• fix: force colors when colors are explicitly enabled (#​1538) by @​Yash121l
• fix: resolve file_types paths from the repo root (#​1537) by @​Yash121l
• fix: don't force-install hooks from the npm postinstall (#​1510) by @​hamodywe
• docs: quote template run examples (#​1472) by @​Guflly

v2.1.12

Compare Source

• fix: fail the hook when staging fixed files errors (#​1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#​1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#​1508) by @​mariokresic

v2.1.11

Compare Source

• fix: inherit terminal size for PTY commands (#​1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#​1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#​1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#​1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#​1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#​1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#​1477) by @​scop
• docs: document script args (#​1479) by @​lntutor
• docs: update em logo by @​mrexox

v2.1.10

Compare Source

• deps: July 2026 (#​1463) by @​mrexox
• feat: AI coding agents integration (#​1448) by @​viralpraxis
• docs: fix language (#​1453) by @​pflanze
• fix: make test suite stable when NO_COLOR is set (#​1449) by @​viralpraxis
• deps: June 2026 (#​1447) by @​mrexox
• deps: migrate shellescape to al.essio.dev/pkg/shellescape (#​1443) by @​maguowei
• docs: upgrade docmd (#​1442) by @​mrexox
• docs: use single quotes in example to handle filepaths with $ by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Update: lefthook v2.1.9 → v2.1.14 (5 patch releases)

Key Changes:

• v2.1.14 (Sep 14, 2026)

  • Fixed error handling when --job/--command matches nothing (#1512)
  • Fixed TTY handling when stdout is not a TTY (#1545)
  • Fixed color forcing when colors are explicitly enabled (#1538)
  • Fixed file_types paths to resolve from repo root instead of CWD (#1537)
  • Fixed npm postinstall to not force-install hooks (#1510)
  • Documentation improvements for files inheritance and template examples

• v2.1.13 (Sep 14, 2026)

  • Identical to v2.1.14 (duplicate release notes)

• v2.1.12 (Aug 28, 2026)

  • Important fix: Hook now fails when staging fixed files errors (#1484) - previously errors were silently logged
  • Fixed LEFTHOOK_OUTPUT environment variable precedence (#1506)
  • CI fix for npm publishing (Node bumped to v24)

• v2.1.11 (Aug 21, 2026)

  • Fixed terminal size inheritance for PTY commands (#1498)
  • Documentation improvements for commit message configuration
  • Go dependency bump to 1.26.6

• v2.1.10 (Jul 8, 2026)

  • Added AI coding agents integration (#1448)
  • Documentation and test suite improvements
  • Dependency updates

Breaking Changes: None identified

Security Fixes: No specific CVEs mentioned, but improved error handling strengthens reliability

🎯 Impact Scope Investigation

Current Usage Analysis:

1. Configuration File (lefthook.yml:1-22):

   • Uses stage_fixed: true on the fmt command (line 4)
   • Uses basic glob, run, and commands features
   • No usage of file_types, --job, or --command CLI flags
   • Pre-commit hooks: fmt, lint, gitleaks, hadolint
   • Pre-push hooks: gitleaks

2. Installation (mise.toml:4):

   • Managed via mise/aqua toolchain
   • Simple version string update from "2.1.9" to "2.1.14"

3. Documentation (CLAUDE.md:14):

   • Documentation mentions lefthook v2.1.2 (outdated reference)
   • No code dependencies on lefthook internals

Impact Assessment:

• Positive Impact: The stage_fixed bug fix (#1484) improves reliability by properly failing hooks when git add operations fail, preventing commits with unfixed content
• No Breaking Changes: All fixes are backwards-compatible improvements
• No Configuration Changes Needed: Current lefthook.yml configuration remains fully compatible
• No Dependency Conflicts: Patch-level update with no API changes

💡 Recommended Actions

Immediate Actions:

1. ✅ Safe to merge - This is a straightforward dependency patch update with only bug fixes and improvements
2. After merge, run mise install to update lefthook to v2.1.14
3. Verify hooks work correctly with lefthook run pre-commit --all-files (optional validation)

Optional Follow-up Actions:

1. Update CLAUDE.md:14 to reflect current lefthook version (currently shows outdated v2.1.2)
2. Test the improved stage_fixed behavior - it now properly fails on staging errors instead of silently succeeding

No Migration Required: All changes are backwards-compatible improvements to existing functionality.

🔗 Reference Links

• v2.1.14 Release
• v2.1.13 Release
• v2.1.12 Release
• v2.1.11 Release
• v2.1.10 Release
• CHANGELOG
• PR #1484: stage_fixed error handling
• PR #1537: file_types path resolution

Generated by koki-develop/claude-renovate-review