chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.6

[renovate]

This PR contains the following updates:

Package	Update	Change
aqua:evilmartians/lefthook	patch	2.1.5 → 2.1.6

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.6

Compare Source

• fix: normalize lefthook path for sh script (#​1383) by @​AndrewKahr
• fix: normalize root to always include trailing slash before path replacement (#​1381) by @​Copilot
• fix: skip pty allocation when stdout is not a terminal (#​1393) by @​technicalpickles
• docs: upgrade docmd (#​1391) by @​mrexox
• fix: log full scoped name for skipped jobs (#​1291) by @​scop
• fix: do not pipe stdout and stderr (#​1382) by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Change: lefthook 2.1.5 → 2.1.6 (patch release)

Bug Fixes:

• Windows compatibility fix (#1383): Normalized lefthook path for sh scripts by converting Windows backslashes to forward slashes using filepath.ToSlash. This fixes "Can't find lefthook in PATH" errors on Windows.
• PTY allocation fix (#1393): Skip pseudo-terminal allocation when stdout is not a terminal. This resolves EPERM failures in sandboxed environments (CI, containers, pipes) by checking isatty.IsTerminal() before attempting PTY allocation.
• Path normalization fix (#1381): Normalize root configuration to always include trailing slash before path replacement, preventing double-slash issues (e.g., .//src/file.js → ./src/file.js).
• Logging enhancement (#1291): Log full scoped name for skipped jobs to improve visibility.
• Output handling (#1382): Do not pipe stdout and stderr during packaging operations.

Breaking Changes: None

Security Fixes: None explicitly mentioned

🎯 Impact Scope Investigation

Usage in Codebase:

• lefthook is declared as a tool dependency in mise.toml:4
• Configuration file exists at lefthook.yml with pre-commit and pre-push hooks:
  • pre-commit: fmt (go fmt), lint (golangci-lint), gitleaks
  • pre-push: gitleaks
• No custom root configuration is used (no potential impact from #1381)
• Standard command execution without special PTY requirements

Dependency Impact:

• Tool-level dependency only (managed by mise)
• No Go module dependency
• No impact on other packages

Configuration Impact:

• Current lefthook.yml uses standard configuration patterns
• No advanced features that could be affected by the fixes
• All fixes are backward-compatible improvements

CI Status:

• Most CI checks passing (ghasec, test, lint)
• Build and review checks pending (not related to this change)
• Renovate stability-days check passed

💡 Recommended Actions

Immediate Actions:

• ✅ Safe to merge - This is a backward-compatible patch release with bug fixes only
• No code changes required in the ghasec codebase
• No configuration updates needed

Post-Merge Verification:

• Verify lefthook hooks continue to work as expected (pre-commit and pre-push)
• No migration steps required

Benefits of Merging:

• Improved Windows compatibility for contributors using Windows
• Better behavior in CI/sandboxed environments (more reliable hook execution)
• More accurate logging for skipped jobs
• Fixes edge cases in path handling

🔗 Reference Links

• Lefthook v2.1.6 Release
• CHANGELOG v2.1.6
• Code comparison v2.1.5...v2.1.6
• PR #1383 - Windows path normalization
• PR #1393 - PTY allocation fix
• PR #1381 - Root path normalization
• PR #1291 - Logging enhancement
• PR #1382 - Output handling

Generated by koki-develop/claude-renovate-review