chore(deps): update dependency aqua:evilmartians/lefthook to v2.1.9

[renovate]

This PR contains the following updates:

Package	Update	Change
aqua:evilmartians/lefthook	patch	2.1.8 → 2.1.9

---

Release Notes

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.9

Compare Source

• fix: update hooks path after resetting (#​1431) by @​mrexox
• deps: May 2026 (#​1415) by @​mrexox

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• Bug fix: fix: update hooks path after resetting (#1431) — corrects an edge case where the git hooks installation path was not updated correctly after a reset operation. No behavior change under normal usage.
• Dependency update: deps: May 2026 (#1415) — routine dependency bumps within the lefthook project itself; no API or configuration changes.
• No breaking changes: This is a patch release (2.1.8 → 2.1.9). The lefthook configuration schema and all hook command syntax remain unchanged.

🎯 Impact Scope Investigation

• mise.toml: The only changed file — a single version string bump ("aqua:evilmartians/lefthook" = "2.1.8" → "2.1.9").
• lefthook.yml: The project's lefthook configuration defines pre-commit hooks (fmt, lint, gitleaks) and a pre-push hook (gitleaks). All hooks use standard configuration options (stage_fixed, glob, run) that have not changed between these versions.
• CI/CD: Lefthook is not invoked in any GitHub Actions workflow directly. It is installed via jdx/mise-action in the setup action and runs only as local developer git hooks.
• No transitive impact: Lefthook is a standalone dev-tooling binary with no Go import API; it has zero impact on the Go module graph or the compiled ghasec binary.

💡 Recommended Actions

• No code changes or configuration modifications are required.
• Merge as-is; developers who run mise install locally will pick up v2.1.9 automatically.

🔗 Reference Links

• lefthook v2.1.9 CHANGELOG
• v2.1.8 → v2.1.9 compare diff
• PR #1431 — fix: update hooks path after resetting
• PR #1415 — deps: May 2026

Generated by koki-develop/claude-renovate-review