chore(deps): update dependency lefthook to v2 by renovate[bot] · Pull Request #30 · AlecRust/branchpilot

renovate · 2026-03-01T01:08:51Z

This PR contains the following updates:

Package	Change	Age	Confidence
lefthook	`^1.13.6` → `^2.1.3`

Release Notes

evilmartians/lefthook (lefthook)

`v2.1.3`

Compare Source

chore: switch artifact attestations gen to actions/attest v4 (#1338) by @scop
chore: describe ENV variables usage in CLI help output (#1337) by @mrexox
fix: support git debug versions (#1334) by @mrexox
deps: March 2026 (#1330) by @mrexox
feat: update minimum go version (#1331) by @mrexox

`v2.1.2`

Compare Source

feat: introduce setup hook option (#1326) by @mrexox
refactor: recovering logic for changesets (#1324) by @mrexox
fix: rollback auto-staged changes if unwanted changes detected (#1251) by @tuchfarber
docs: improve docs ui (#1323) by @mrexox
docs: additional skip example and note about reinstallation (#1319) by @iloveitaly
docs: fix incorrect --verbose usage (#1318) by @iloveitaly
pkg: fix python packages publishing by @mrexox

`v2.1.1`

Compare Source

ci: fix publishing to PyPi by @mrexox
fix: reset colors on config read (#1309) by @mrexox
chore: reduce verbosity of hints in lefthook install (#1303) by @joevin-slq-docto
docs: add missing /v2 suffix for go get -tool (#1304) by @alexandregv

`v2.1.0`

Compare Source

ci: skip Python publishing by [@mrexox][]
chore: fancy wording and indentation for hits by [@mrexox][]
feat: check core.hooksPath when lefthook install (#1292) by [@joevin-slq-docto][]
feat: allow installing non-git hooks (#1301) by [@mrexox][]

`v2.0.16`

Compare Source

chore: timeout cleanup (#1297) by @mrexox
feat: add timeout argument (#1263) by @franzramadhan
deps: January 2026 (#1285) by @mrexox
pkg: pack one binary per platform into python wheels (#1181) by @danfimov
fix: accept string in file_types (#1288) by @scop
docs: elaborate on when to refetch and failure mode (#1287) by @scop
fix: try reading direct file instead of all remotes (#1243) by @mrexox
perf: [breaking] skip ghost hook when hooks are already configured (#1255) by @WooWan
chore: upgrade to 2.8.0 (#1278) by @scop

`v2.0.15`

Compare Source

docs: clarify remote settings (#1260) by @mrexox
feat: skip scripts if args given with empty file template (#1277) by @mrexox

`v2.0.14`

Compare Source

fix: skip if any files template is empty (#1275) by @mrexox
feat: add jsonc support (#1274) by @mrexox
deps: switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#1261) by @scop
fix: don't install custom hooks to hooks dir (#1246) by @scop
deps: December 2025 (#1209) by @mrexox

`v2.0.13`

Compare Source

fix: set extends to empty slice after loading remotes (#1259) by @mrexox
fix: allow custom hooks in JSON schema by updating generator (#1250) by @jeonghoon11
docs: remove duplicate config: false description (#1245) by @scop
chore: add more tests (#1244) by @mrexox

`v2.0.12`

Compare Source

chore: small changes on diff printing (#1242) by @mrexox
feat: ability to show diff when failing on changes (#1227) by @scop
fix: make short status parser more robust (#1236) by @scop
docs: fix readme (#1235) by @matdibu

`v2.0.11`

Compare Source

feat: refetch and cleanup on ref change (#1210) by @mrexox
ci: npm trusted publishing (#1234) by @mrexox
feat: more rudimentary shell completions (#1230) by @scop

`v2.0.10`

Compare Source

feat: add no_auto_install to lefthook.yml (#1231) by @pavelzw
fix: skip if empty files template (#1233) by @mrexox

`v2.0.9`

Compare Source

fix: skip pre commit hook if no staged files (#1229) by @mrexox
fix: do not try to hash-object directories (#1220) by @scop
fix: check and report Scanner errors (#1222) by @scop
refactor: command executor tweaks (#1224) by @scop
refactor: remove some redundant code (#1221) by @scop
fix: improve separation of options and filenames for more git commands (#1225) by @scop
chore: upgrade golangci-lint to 2.7.1, add godoclint (#1223) by @scop
chore: remove unnecessary .svg executable permissions (#1219) by @scop

`v2.0.8`

Compare Source

fix: do not escape custom templates in command replacement (#1213) by @joevin-sql-docto

`v2.0.7`

Compare Source

fix: prefer using lefthook from the $PATH (#1211) by @joevin-sql-docto

`v2.0.6`

Compare Source

feat: save original executable location in hooks (#1208) by @mrexox
docs: encourage python install using pipx (#1207) by @franzramadhan

`v2.0.5`

Compare Source

feat: add optional args to scripts (#1206) by @mrexox
deps: November 2025 (#1200) by @mrexox
chore: upgrade golangci-lint to 2.6.1, add modernize (#1190) by @scop
chore: publish artifact attestations (#1189) by @scop

`v2.0.4`

Compare Source

fix: glob_matcher jsonschema values
feat: add optional standard glob matcher (doublestar) (#1188) by @jasonwbarnett

`v2.0.3`

Compare Source

feat: fail_on_changes non-ci option (#1186) by @scop
deps: update mimetypes (#1185) by @mrexox

`v2.0.2`

Compare Source

fix: add mutex lock before all git commands (#1178) by @mrexox

`v2.0.1`

Compare Source

fix: set extends to empty slice after loading remotes (#1259) by @mrexox
fix: allow custom hooks in JSON schema by updating generator (#1250) by @jeonghoon11
docs: remove duplicate config: false description (#1245) by @scop
chore: add more tests (#1244) by @mrexox

`v2.0.0`

Compare Source

Breaking changes

exclude option no longer accepts regexp, only globs.
skip_output option is dropped, use output instead.
Some CLI arguments have changed their names to make it more consistent. See lefthook run -h for details.
for only and skip options with - run: '...' values the command executer was changed to Bourne Shell.

Commits

fix: accept --fail-on-changes=false as override value (#1168) by @mrexox
feat: [breaking] use sh as command executor on Windows (#1166) by @mrexox
refactor: [breaking] drop support for exclude regexp (#1162) by @mrexox
refactor: [breaking] drop deprecated skip_output option (#1159) by @mrexox
refactor: [breaking] use another cli framework (#1155) by @mrexox

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-03-01T01:09:28Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	lefthook@1.13.6 ⏵ 2.1.3	⁺¹			⁺²

View full report

renovate bot force-pushed the renovate/lefthook-2.x branch 2 times, most recently from 83d910f to 4cd61b1 Compare March 1, 2026 21:51

chore(deps): update dependency lefthook to v2

c434c42

renovate bot force-pushed the renovate/lefthook-2.x branch from 4cd61b1 to c434c42 Compare March 7, 2026 10:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency lefthook to v2#30

chore(deps): update dependency lefthook to v2#30
renovate[bot] wants to merge 1 commit intomainfrom
renovate/lefthook-2.x

renovate bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

socket-security bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Configuration

Uh oh!

socket-security bot commented Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 1, 2026 •

edited

Loading

socket-security bot commented Mar 1, 2026 •

edited

Loading