chore(deps): update dependency lefthook to v2.0.15 #156

renovate · 2025-12-06T12:14:10Z

This PR contains the following updates:

Package	Change	Age	Confidence
lefthook	`2.0.4` → `2.0.15`

Release Notes

evilmartians/lefthook (lefthook)

`v2.0.15`

Compare Source

docs: clarify remote settings (#1260) by @mrexox
feat: skip scripts if args given with empty file template (#1277) by @mrexox

`v2.0.14`

Compare Source

fix: skip if any files template is empty (#1275) by @mrexox
feat: add jsonc support (#1274) by @mrexox
deps: switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1261) by @scop
fix: don't install custom hooks to hooks dir (#1246) by @scop
deps: December 2025 (#1209) by @mrexox

`v2.0.13`

Compare Source

fix: set extends to empty slice after loading remotes (#1259) by @mrexox
fix: allow custom hooks in JSON schema by updating generator (#1250) by @jeonghoon11
docs: remove duplicate config: false description (#1245) by @scop
chore: add more tests (#1244) by @mrexox

`v2.0.12`

Compare Source

chore: small changes on diff printing (#1242) by @mrexox
feat: ability to show diff when failing on changes (#1227) by @scop
fix: make short status parser more robust (#1236) by @scop
docs: fix readme (#1235) by @matdibu

`v2.0.11`

Compare Source

feat: refetch and cleanup on ref change (#1210) by @mrexox
ci: npm trusted publishing (#1234) by @mrexox
feat: more rudimentary shell completions (#1230) by @scop

`v2.0.10`

Compare Source

feat: add no_auto_install to lefthook.yml (#1231) by @pavelzw
fix: skip if empty files template (#1233) by @mrexox

`v2.0.9`

Compare Source

fix: skip pre commit hook if no staged files (#1229) by @mrexox
fix: do not try to hash-object directories (#1220) by @scop
fix: check and report Scanner errors (#1222) by @scop
refactor: command executor tweaks (#1224) by @scop
refactor: remove some redundant code (#1221) by @scop
fix: improve separation of options and filenames for more git commands (#1225) by @scop
chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223) by @scop
chore: remove unnecessary .svg executable permissions (#1219) by @scop

`v2.0.8`

Compare Source

fix: do not escape custom templates in command replacement (#1213) by @joevin-sql-docto

`v2.0.7`

Compare Source

fix: prefer using lefthook from the $PATH (#1211) by @joevin-sql-docto

`v2.0.6`

Compare Source

feat: save original executable location in hooks (#1208) by @mrexox
docs: encourage python install using pipx (#1207) by @franzramadhan

`v2.0.5`

Compare Source

feat: add optional args to scripts (#1206) by @mrexox
deps: November 2025 (#1200) by @mrexox
chore: upgrade golangci-lint to 2.6.1, add modernize (#1190) by @scop
chore: publish artifact attestations (#1189) by @scop

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-12-06T12:14:27Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/lefthook

2.0.15

🟢 5.6

Details

Check	Score	Reason
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 3	Found 11/30 approved changesets -- score normalized to 3
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Packaging	🟢 10	packaging workflow detected
SAST	🟢 9	SAST tool detected but not run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

Scanned Files

package.json

github-actions · 2025-12-06T12:14:31Z

📏 PR Size: 🟢 XS

Changes:

📁 Files changed: 1
➕ Additions: 1
➖ Deletions: 1

💡 Tips for managing PR size

XS/Small: Easy to review ✅
Medium: Consider breaking down if possible
Large/XL: Please split into smaller PRs for easier review

Smaller PRs are easier to review, test, and merge!

This comment updates automatically when the PR changes.

socket-security · 2025-12-06T12:14:40Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	lefthook@2.0.4 ⏵ 2.0.15	⁺¹			⁺¹

View full report

github-actions · 2025-12-06T12:14:44Z