chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.12

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aqua:evilmartians/lefthook	tools	patch	2.1.9 → 2.1.12

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.12

Compare Source

• fix: fail the hook when staging fixed files errors (#​1484) by @​teddytennant
• fix: LEFTHOOK_OUTPUT precedence (#​1506) by @​Yuki9814
• ci: fix npm publishing by bumping Node to 24 (#​1508) by @​mariokresic

v2.1.11

Compare Source

• fix: inherit terminal size for PTY commands (#​1498) by @​mariokresic
• docs: correct Lefthook commit message configuration (#​1499) by @​codersjj
• docs: hide contributors regenerate tip from the site (#​1500) by @​MikevPeeren
• docs: clarify signed-off commit example (#​1492) by @​nightcityblade
• deps: bump Go to 1.26.6 (#​1495) by @​quaacxlok
• docs: fix em notice by @​mrexox
• docs: update docmd (#​1481) by @​mrexox
• docs: fix EM mention HTML by @​mrexox
• docs: clarify remote script folders (#​1477) by @​scop
• docs: document script args (#​1479) by @​lntutor
• docs: update em logo by @​mrexox

v2.1.10

Compare Source

• deps: July 2026 (#​1463) by @​mrexox
• feat: AI coding agents integration (#​1448) by @​viralpraxis
• docs: fix language (#​1453) by @​pflanze
• fix: make test suite stable when NO_COLOR is set (#​1449) by @​viralpraxis
• deps: June 2026 (#​1447) by @​mrexox
• deps: migrate shellescape to al.essio.dev/pkg/shellescape (#​1443) by @​maguowei
• docs: upgrade docmd (#​1442) by @​mrexox
• docs: use single quotes in example to handle filepaths with $ by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Jump: 2.1.9 → 2.1.12 (patch updates across 3 versions)

v2.1.12 (2026-08-28)

• Fix: Fail the hook when staging fixed files errors (#1484) - Hooks now properly fail with non-zero exit code when git add fails during stage_fixed operations, preventing commits with unfixed content
• Fix: LEFTHOOK_OUTPUT precedence (#1506) - Environment variable now correctly overrides configuration file settings as documented
• CI: Fix npm publishing by bumping Node to 24 (#1508) - Internal build infrastructure update

v2.1.11 (2026-08-21)

• Fix: Inherit terminal size for PTY commands (#1498) - Proper terminal display handling
• Documentation: Multiple documentation corrections and improvements
• Dependencies: Bumped Go to 1.26.6

v2.1.10 (2026-07-08)

• Feature: AI coding agents integration (#1448) - New automation capabilities
• Fix: Test suite stable when NO_COLOR is set (#1449)
• Dependencies: Migrated shellescape package, July/June 2026 dependency updates

Breaking Changes: None identified across all three releases
Security Fixes: None explicitly mentioned

🎯 Impact Scope Investigation

Current Usage Locations:

• mise.toml:4 - Tool version declaration (2.1.9 → 2.1.12)
• lefthook.yml - Git hook configuration file

Relevant Configuration Analysis:
The project's lefthook.yml uses:

• stage_fixed: true on the fmt command (lefthook.yml:4)
• Pre-commit hooks: fmt, lint, gitleaks, hadolint
• Pre-push hooks: gitleaks

Impact Assessment:

1. stage_fixed behavior improvement: The fix in v2.1.12 (#1484) affects the fmt command which uses stage_fixed: true. This is a positive change - the hook will now properly fail if go fmt fixes code but staging fails, preventing commits with unfixed formatting. Previously, such errors were silently ignored.

2. LEFTHOOK_OUTPUT precedence: The project doesn't use LEFTHOOK_OUTPUT environment variable or explicit output configuration, so this fix has no impact.

3. Dependency compatibility: No conflicts with the project's Go 1.26.4 version (lefthook v2.1.11 uses Go 1.26.6, fully compatible).

4. Configuration compatibility: All hooks use standard features (glob, run, stage_fixed) that remain unchanged and backward compatible.

💡 Recommended Actions

Immediate Actions:

• ✅ Safe to merge - No code changes, migrations, or configuration updates required
• The update only modifies mise.toml to bump the version number
• After merge, run mise install to update the local lefthook binary

Testing Recommendations:

• Verify pre-commit hooks function correctly after mise install
• Test the improved stage_fixed behavior: the hook should now fail if formatting changes cannot be staged (e.g., due to file permission issues)

Expected Behavior Changes (improvements only):

• More robust error handling when go fmt fixes files but staging fails
• Hook will properly exit with non-zero code instead of silently succeeding

🔗 Reference Links

• v2.1.12 Release
• v2.1.11 Release
• v2.1.10 Release
• CHANGELOG
• PR #1484 - stage_fixed error handling
• PR #1506 - LEFTHOOK_OUTPUT precedence

Generated by koki-develop/claude-renovate-review