Skip to content

chore(deps-dev): bump lefthook from 2.1.14 to 2.1.15 in the npm-dependencies group across 1 directory - #43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-e2e8bcde7c
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-e2e8bcde7c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 1 update in the / directory: lefthook.

Updates lefthook from 2.1.14 to 2.1.15

Release notes

Sourced from lefthook's releases.

v2.1.15

Changelog

  • 2388dde2b31dc9a782e967764046b41b404cece9 feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#1547)
  • 49260b57c2a56bc4d65d09395458bb3ce3c63311 fix(lfs): do not pipe stdin into post-checkout git-lfs hook (#1523)
  • 38bc1c6cef3192a36002d0dcc37973416249c07e fix: quote paths in the generated hook shim (#1509)
  • 0892f5f256ebe162485492af5ca14c2ced45586f fix: remove color blending (#1558)
  • f1de41cd5cd6a6c5e0179c65e00d5ed6d90078c2 fix: resolve push-files fallback against the remote-tracking ref (#1485)
  • 07ce565bcc73465bc18fb36561b935ee2a53eab6 fix: sanitize slashes in remote ref when building the checkout dir name (#1486)
  • c465ca8ef4fc9ee0695aa4a9530fc404ed838b7a test(cmd): regression for valid fish shell completion output (#1527)
Changelog

Sourced from lefthook's changelog.

2.1.15

Commits
  • d050364 2.1.15: small fixes to output and LFS
  • 49260b5 fix(lfs): do not pipe stdin into post-checkout git-lfs hook (#1523)
  • 0892f5f fix: remove color blending (#1558)
  • f1de41c fix: resolve push-files fallback against the remote-tracking ref (#1485)
  • c465ca8 test(cmd): regression for valid fish shell completion output (#1527)
  • 07ce565 fix: sanitize slashes in remote ref when building the checkout dir name (#1486)
  • 38bc1c6 fix: quote paths in the generated hook shim (#1509)
  • 2388dde feat: propagate forced colors to hook commands via CLICOLOR_FORCE (#1547)
  • See full diff in compare view
Attestation changes

This version has no provenance attestation, while the previous version (2.1.14) was attested. Review the package versions before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 1 update in the / directory: [lefthook](https://github.com/evilmartians/lefthook).


Updates `lefthook` from 2.1.14 to 2.1.15
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.14...v2.1.15)

---
updated-dependencies:
- dependency-name: lefthook
  dependency-version: 2.1.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 6, 2026
@Zelys-DFKH

Copy link
Copy Markdown
Collaborator

Superseded: lefthook 2.1.15 is resolved locally with npm run deps:refresh behind the seven-day cooldown (b479903b, with a70cefd3 pointing its optional platform packages at 2.1.15 in the lock file). Dependabot's lock file for this group cannot be merged here: see dependabot/dependabot-core#16173. The commits land on main with the next push.

@Zelys-DFKH Zelys-DFKH closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-e2e8bcde7c branch October 8, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant