chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.5

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
aqua:evilmartians/lefthook	patch	2.1.4 → 2.1.5	2.1.6

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.5

Compare Source

• deps: April 2026 (#​1375) by @​mrexox
• docs: update documentation and docs for claude (#​1373) by @​mrexox
• fix: git repository merge issue (#​1372) by @​mrexox
• fix: use pre-push stdin for push file detection (#​1368) by @​supitsdu
• chore: small cleanup (#​1370) by @​mrexox
• fix: prevent lefthook run from overwriting global hooks (#​1371) by @​ivy
• chore: upgrade to 2.11.4 (#​1362) by @​scop
• chore: fix golangci-lint version lookup by @​mrexox
• chore: move golangci-lint version to .tool-versions (#​1349) by @​scop

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Change: lefthook 2.1.4 → 2.1.5 (patch release)

Key Changes:

• Bug Fixes:

  • Fixed git repository merge issue that affected internal repository handling
  • Prevented lefthook run from overwriting global hooks (important stability fix)
  • Corrected pre-push stdin usage for push file detection in SHA256 repositories

• Maintenance Updates:

  • Upgraded golangci-lint to v2.11.4
  • Applied April 2026 dependency updates
  • Moved golangci-lint version to .tool-versions for better toolchain consistency
  • Documentation updates including Claude-related documentation

• Breaking Changes: None identified

• Security Fixes: No security-related changes mentioned in the release notes

This is a standard patch release focused on bug fixes and maintenance. The most notable fix prevents lefthook run from inadvertently overwriting globally-configured hooks, which improves reliability in shared development environments.

🎯 Impact Scope Investigation

Lefthook Usage in Codebase:

• Managed through mise.toml as a development tool (mise.toml:4)
• Configuration exists in lefthook.yml with pre-commit and pre-push hooks
• Pre-commit hooks: go fmt, golangci-lint run, gitleaks, hadolint
• Pre-push hooks: gitleaks
• Documented in CLAUDE.md (references version 2.1.2, outdated)

Impact Assessment:

• Configuration Compatibility: The existing lefthook.yml configuration uses standard features (commands, glob, run, stage_fixed) that are stable across patch versions. No configuration changes required.
• Hook Behavior: The bug fixes improve reliability without changing the hook execution interface
• Dependencies: No transitive dependency impact on the Go project or Docker build process
• Documentation: CLAUDE.md mentions lefthook 2.1.2 which is outdated but doesn't affect functionality

Files Requiring Changes:

• mise.toml - Already updated in the PR (2.1.4 → 2.1.5)
• No code changes required

💡 Recommended Actions

1. Merge the PR - This is a safe patch update with no breaking changes
2. Optional Documentation Update - Consider updating CLAUDE.md:15 to reflect current version (2.1.5 instead of 2.1.2) in a separate PR for accuracy
3. Post-Merge Verification:
   • Run mise install to update lefthook to v2.1.5
   • Test pre-commit hooks: git add . && git commit -m "test"
   • Verify all hooks execute correctly

No migration work or code modifications are required. The existing lefthook configuration is fully compatible with v2.1.5.

🔗 Reference Links

• Release Notes v2.1.5
• CHANGELOG v2.1.5
• Comparison v2.1.4...v2.1.5
• PR #1371: Prevent lefthook run from overwriting global hooks
• PR #1368: Use pre-push stdin for push file detection

Generated by koki-develop/claude-renovate-review