chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.12

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:evilmartians/lefthook	tools	patch	2.1.9 → 2.1.12	2.1.14 (+1)

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.12

Compare Source

• fix: fail the hook when staging fixed files errors (#​1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#​1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#​1508) by @​mariokresic

v2.1.11

Compare Source

• fix: inherit terminal size for PTY commands (#​1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#​1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#​1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#​1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#​1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#​1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#​1477) by @​scop
• docs: document script args (#​1479) by @​lntutor
• docs: update em logo by @​mrexox

v2.1.10

Compare Source

• deps: July 2026 (#​1463) by @​mrexox
• feat: AI coding agents integration (#​1448) by @​viralpraxis
• docs: fix language (#​1453) by @​pflanze
• fix: make test suite stable when NO_COLOR is set (#​1449) by @​viralpraxis
• deps: June 2026 (#​1447) by @​mrexox
• deps: migrate shellescape to al.essio.dev/pkg/shellescape (#​1443) by @​maguowei
• docs: upgrade docmd (#​1442) by @​mrexox
• docs: use single quotes in example to handle filepaths with $ by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Range: v2.1.9 → v2.1.12

v2.1.12 (2026-08-28)

• Critical Fix: Fixed error handling for stage_fixed operations (PR #1484). Previously, when git add failed during file staging, lefthook would log a warning but exit with code 0, allowing commits with unfixed content. Now properly fails the hook with non-zero exit status.
• Bug Fix: Corrected LEFTHOOK_OUTPUT environment variable precedence handling (PR #1506)
• Infrastructure: Bumped Node.js to version 24 for npm publishing compatibility (PR #1508)

v2.1.11 (2026-08-21)

• Enhancement: Improved PTY (pseudo-terminal) commands to inherit correct terminal size (PR #1498)
• Dependency Update: Bumped Go to version 1.26.6 (PR #1495)
• Documentation: Multiple doc improvements for commit message configuration, remote script folders, and script arguments

v2.1.10 (2026-07-08)

• Feature: Added AI coding agents integration support (PR #1448)
• Testing: Stabilized test suite when NO_COLOR environment variable is set (PR #1449)
• Dependency: Migrated shellescape library to al.essio.dev/pkg/shellescape (PR #1443)

Breaking Changes: None identified across all three releases.

🎯 Impact Scope Investigation

Configuration Analysis

The codebase uses lefthook with the following configuration (lefthook.yml:4):

pre-commit:
  commands:
    fmt:
      stage_fixed: true  # ← DIRECTLY BENEFITS FROM v2.1.12 FIX
      glob: "**/*.go"
      run: go fmt ./...

Key Findings:

1. stage_fixed: true usage: The repository uses this feature in the fmt command. The v2.1.12 fix (#1484) directly improves error handling for this configuration. This is a positive change that prevents silent failures when staging formatted files encounters errors.

2. No environment variable usage: Grep search confirms no usage of LEFTHOOK_OUTPUT or other lefthook-specific environment variables in the codebase, so the precedence fix in #1506 has no impact.

3. No PTY usage: The lefthook configuration does not use PTY-enabled commands, so the v2.1.11 terminal size fix has no direct impact.

4. Go version compatibility: The project uses Go 1.26.4 (mise.toml:2), which is compatible with lefthook's internal Go 1.26.6 dependency bump.

Dependency Chain Impact: Lefthook is a development tool installed via mise aqua backend. It has no runtime dependencies in the production application and does not affect the Docker container or sandbox execution environment.

File Changes: Only mise.toml is modified, changing the version from 2.1.9 to 2.1.12.

💡 Recommended Actions

Immediate Actions:

1. ✅ Merge this PR - The update is backward compatible with no breaking changes
2. ✅ Test locally (optional but recommended):

   mise install
   lefthook run pre-commit

   This will verify the improved stage_fixed error handling works correctly

Benefits of Merging:

• Improved reliability: The stage_fixed: true configuration will now properly fail the pre-commit hook if git add encounters errors, preventing commits with unfixed code
• Better error visibility: Failed staging operations will now exit with non-zero status, making CI/CD failures more transparent
• Security posture: No security vulnerabilities fixed or introduced

Future Consideration:

• Version v2.1.14 is pending (as noted in the PR description). Consider updating to v2.1.14 when available for additional fixes:
  • Error handling when --job/--command matches nothing
  • TTY compatibility with piped output
  • File type path resolution improvements

No Migration Required: This is a drop-in replacement with no configuration changes needed.

🔗 Reference Links

• v2.1.12 Release
• v2.1.11 Release
• v2.1.10 Release
• Full Changelog
• PR #1484 - stage_fixed error fix
• PR #1506 - LEFTHOOK_OUTPUT precedence

Generated by koki-develop/claude-renovate-review