feat(deps): Update Major updates (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4 → v6
aqua:evilmartians/lefthook		major	1.12.2 → 2.1.8
aqua:nodejs/node		major	24.4.1 → 26.2.0
aqua:pnpm (source)		major	10 → 11
jdx/mise-action	action	major	v2 → v4
typescript (source)	devDependencies	major	^5.8.3 → ^6.0.0

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

v4.3.1

Compare Source

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in #​2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236
• Prepare release v4.3.0 by @​salmanmkc in #​2237

New Contributors

• @​motss made their first contribution in #​1971
• @​mouismail made their first contribution in #​1977
• @​benwells made their first contribution in #​2043
• @​nebuk89 made their first contribution in #​2194
• @​salmanmkc made their first contribution in #​2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

v4.1.0

Compare Source

• Add support for partial checkout filters

evilmartians/lefthook (aqua:evilmartians/lefthook)

v2.1.8

Compare Source

• fix: do not warn if local hooks path is equal to default hooks path (#​1421) by @​mrexox

v2.1.7

Compare Source

• fix: use contrast colors (#​1420) by @​mrexox
• fix: apply stage_fixed only if it is safe (#​1418) by @​mrexox
• fix: try to always restore unstaged changes (#​1417) by @​mrexox
• fix: always restore unstaged changes (#​1416) by @​mrexox
• refactor: add new logger without a global state (#​1385) by @​mrexox
• fix: linter, sacrifice optimization for readability by @​mrexox
• fix: separate fallback push branch from pathspecs (#​1396) by @​lawrence3699

v2.1.6

Compare Source

• fix: normalize lefthook path for sh script (#​1383) by @​AndrewKahr
• fix: normalize root to always include trailing slash before path replacement (#​1381) by @​Copilot
• fix: skip pty allocation when stdout is not a terminal (#​1393) by @​technicalpickles
• docs: upgrade docmd (#​1391) by @​mrexox
• fix: log full scoped name for skipped jobs (#​1291) by @​scop
• fix: do not pipe stdout and stderr (#​1382) by @​mrexox

v2.1.5

Compare Source

• deps: April 2026 (#​1375) by @​mrexox
• docs: update documentation and docs for claude (#​1373) by @​mrexox
• fix: git repository merge issue (#​1372) by @​mrexox
• fix: use pre-push stdin for push file detection (#​1368) by @​supitsdu
• chore: small cleanup (#​1370) by @​mrexox
• fix: prevent lefthook run from overwriting global hooks (#​1371) by @​ivy
• chore: upgrade to 2.11.4 (#​1362) by @​scop
• chore: fix golangci-lint version lookup by @​mrexox
• chore: move golangci-lint version to .tool-versions (#​1349) by @​scop

v2.1.4

Compare Source

• pkg: fix scripts (#​1348) by @​mrexox
• fix: bring back {lefthook_job_name} template (#​1347) by @​mrexox
• pkg: refactor packaging (2) (#​1346) by @​mrexox
• fix: separate more commands' non-option args with -- (#​1339) by @​scop
• docs: change logo to point to landing page instead of itself (#​1343) by @​igas
• pkg: make it easier to read (#​1340) by @​mrexox
• pkg: refactor packaging scripts (#​1308) by @​mrexox

v2.1.3

Compare Source

• chore: switch artifact attestations gen to actions/attest v4 (#​1338) by @​scop
• chore: describe ENV variables usage in CLI help output (#​1337) by @​mrexox
• fix: support git debug versions (#​1334) by @​mrexox
• deps: March 2026 (#​1330) by @​mrexox
• feat: update minimum go version (#​1331) by @​mrexox

v2.1.2

Compare Source

• feat: introduce setup hook option (#​1326) by @​mrexox
• refactor: recovering logic for changesets (#​1324) by @​mrexox
• fix: rollback auto-staged changes if unwanted changes detected (#​1251) by @​tuchfarber
• docs: improve docs ui (#​1323) by @​mrexox
• docs: additional skip example and note about reinstallation (#​1319) by @​iloveitaly
• docs: fix incorrect --verbose usage (#​1318) by @​iloveitaly
• pkg: fix python packages publishing by @​mrexox

v2.1.1

Compare Source

• ci: fix publishing to PyPi by @​mrexox
• fix: reset colors on config read (#​1309) by @​mrexox
• chore: reduce verbosity of hints in lefthook install (#​1303) by @​joevin-slq-docto
• docs: add missing /v2 suffix for go get -tool (#​1304) by @​alexandregv

v2.1.0

Compare Source

• ci: skip Python publishing by [@​mrexox][]
• chore: fancy wording and indentation for hits by [@​mrexox][]
• feat: check core.hooksPath when lefthook install (#​1292) by [@​joevin-slq-docto][]
• feat: allow installing non-git hooks (#​1301) by [@​mrexox][]

v2.0.16

Compare Source

• chore: timeout cleanup (#​1297) by @​mrexox
• feat: add timeout argument (#​1263) by @​franzramadhan
• deps: January 2026 (#​1285) by @​mrexox
• pkg: pack one binary per platform into python wheels (#​1181) by @​danfimov
• fix: accept string in file_types (#​1288) by @​scop
• docs: elaborate on when to refetch and failure mode (#​1287) by @​scop
• fix: try reading direct file instead of all remotes (#​1243) by @​mrexox
• perf: [breaking] skip ghost hook when hooks are already configured (#​1255) by @​WooWan
• chore: upgrade to 2.8.0 (#​1278) by @​scop

v2.0.15

Compare Source

• docs: clarify remote settings (#​1260) by @​mrexox
• feat: skip scripts if args given with empty file template (#​1277) by @​mrexox

v2.0.14

Compare Source

• fix: skip if any files template is empty (#​1275) by @​mrexox
• feat: add jsonc support (#​1274) by @​mrexox
• deps: switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#​1261) by @​scop
• fix: don't install custom hooks to hooks dir (#​1246) by @​scop
• deps: December 2025 (#​1209) by @​mrexox

v2.0.13

Compare Source

• fix: set extends to empty slice after loading remotes (#​1259) by @​mrexox
• fix: allow custom hooks in JSON schema by updating generator (#​1250) by @​jeonghoon11
• docs: remove duplicate config: false description (#​1245) by @​scop
• chore: add more tests (#​1244) by @​mrexox

v2.0.12

Compare Source

• chore: small changes on diff printing (#​1242) by @​mrexox
• feat: ability to show diff when failing on changes (#​1227) by @​scop
• fix: make short status parser more robust (#​1236) by @​scop
• docs: fix readme (#​1235) by @​matdibu

v2.0.11

Compare Source

• feat: refetch and cleanup on ref change (#​1210) by @​mrexox
• ci: npm trusted publishing (#​1234) by @​mrexox
• feat: more rudimentary shell completions (#​1230) by @​scop

v2.0.10

Compare Source

• feat: add no_auto_install to lefthook.yml (#​1231) by @​pavelzw
• fix: skip if empty files template (#​1233) by @​mrexox

v2.0.9

Compare Source

• fix: skip pre commit hook if no staged files (#​1229) by @​mrexox
• fix: do not try to hash-object directories (#​1220) by @​scop
• fix: check and report Scanner errors (#​1222) by @​scop
• refactor: command executor tweaks (#​1224) by @​scop
• refactor: remove some redundant code (#​1221) by @​scop
• fix: improve separation of options and filenames for more git commands (#​1225) by @​scop
• chore: upgrade golangci-lint to 2.7.1, add godoclint (#​1223) by @​scop
• chore: remove unnecessary .svg executable permissions (#​1219) by @​scop

v2.0.8

Compare Source

• fix: do not escape custom templates in command replacement (#​1213) by @​joevin-sql-docto

v2.0.7

Compare Source

• fix: prefer using lefthook from the $PATH (#​1211) by @​joevin-sql-docto

v2.0.6

Compare Source

• feat: save original executable location in hooks (#​1208) by @​mrexox
• docs: encourage python install using pipx (#​1207) by @​franzramadhan

v2.0.5

Compare Source

• feat: add optional args to scripts (#​1206) by @​mrexox
• deps: November 2025 (#​1200) by @​mrexox
• chore: upgrade golangci-lint to 2.6.1, add modernize (#​1190) by @​scop
• chore: publish artifact attestations (#​1189) by @​scop

v2.0.4

Compare Source

• fix: glob_matcher jsonschema values
• feat: add optional standard glob matcher (doublestar) (#​1188) by @​jasonwbarnett

v2.0.3

Compare Source

• feat: fail_on_changes non-ci option (#​1186) by @​scop
• deps: update mimetypes (#​1185) by @​mrexox

v2.0.2

Compare Source

• fix: add mutex lock before all git commands (#​1178) by @​mrexox

v2.0.1

Compare Source

• chore: timeout cleanup (#​1297) by @​mrexox
• feat: add timeout argument (#​1263) by @​franzramadhan
• deps: January 2026 (#​1285) by @​mrexox
• pkg: pack one binary per platform into python wheels (#​1181) by @​danfimov
• fix: accept string in file_types (#​1288) by @​scop
• docs: elaborate on when to refetch and failure mode (#​1287) by @​scop
• fix: try reading direct file instead of all remotes (#​1243) by @​mrexox
• perf: [breaking] skip ghost hook when hooks are already configured (#​1255) by @​WooWan
• chore: upgrade to 2.8.0 (#​1278) by @​scop

v2.0.0

Compare Source

Breaking changes

• exclude option no longer accepts regexp, only globs.
• skip_output option is dropped, use output instead.
• Some CLI arguments have changed their names to make it more consistent. See lefthook run -h for details.
• for only and skip options with - run: '...' values the command executer was changed to Bourne Shell.

Commits

• fix: accept --fail-on-changes=false as override value (#​1168) by @​mrexox
• feat: [breaking] use sh as command executor on Windows (#​1166) by @​mrexox
• refactor: [breaking] drop support for exclude regexp (#​1162) by @​mrexox
• refactor: [breaking] drop deprecated skip_output option (#​1159) by @​mrexox
• refactor: [breaking] use another cli framework (#​1155) by @​mrexox

v1.13.6

Compare Source

• fix: embed jsonschema into binary (#​1158) by @​mrexox

v1.13.5

Compare Source

• chore: a small cleanup by @​mrexox
• refactor: use semver to check versions (#​1152) by @​mrexox
• fix: add comprehensive tests for spinner name formatting (#​1145) @​technicalpickles
• docs: add LEFTHOOK_BIN environment variable to documentation (#​1151) @​technicalpickles
• chore: tests improvements (#​1148) by @​mrexox
• chore: fix naming for integration tests (#​1146) by @​mrexox
• docs: use codecov coverage badge by @​mrexox
• ci: codecov (#​1147) by @​mrexox
• docs: use actual latest version (#​1143) by @​mrexox
• docs: add exclude to hook-level settings by @​mrexox

v1.13.4

Compare Source

• fix: add exclude option to hook level (#​1141) by @​mrexox
• fix: allow skipping groups (#​1140) by @​mrexox

v1.13.3

Compare Source

• deps: September 2025 (#​1139) by @​mrexox
• fix: concurrent map access issue (#​1138) by @​mrexox

v1.13.2

Compare Source

• feat: inherit file_types from parent jobs (#​1135) by @​mrexox
• fix: move gen at root (#​1133) by @​mrexox
• refactor: better scope subpackages (#​1132) by @​mrexox

v1.13.1

Compare Source

• feat: add no stage fixed argument (#​1130) by @​mrexox
• refactor: reduce the amount of code in a single file (#​1131) by @​mrexox
• fix: re-evaluate status for changeset (#​1129) by @​mrexox
• refactor: reduce the amount of code in a single file (#​1118) by @​mrexox
• chore: update issue templates by @​mrexox
• docs: add fail_on_changes to configuration/README.md (#​1119) by @​7crabs
• docs: update go installation note (#​1117) by @​leakedmemory

v1.13.0

Compare Source

• fix: use batched cmd for calculating git hashes (#​1116) by @​mrexox
• fix: add mutex to prevent concurrent git adds (#​1115) by @​mrexox
• refactor: improve structuring (#​1103) by @​mrexox
• feat: fail on change (#​1095) by @​olivier-lacroix
• fix: set --force for git add command (#​1104) by @​michaelm
• feat: recursively log successful results in summary (#​1108) by @​siler
• fix: groups with successes and skips are successful (#​1107) by @​siler

v1.12.4

Compare Source

• deps: September 2025 (#​1102) by @​mrexox
• feat: add tags argument (#​1101) by @​mrexox
• chore: bump github.com/go-viper/mapstructure/v2 (#​1094)

v1.12.3

Compare Source

• feat: add MIME types to file_types filters (#​1092)
• fix: respect LEFTHOOK_CONFIG in lefthook install (#​1090) by @​TECHNOFAB11
• docs: update pnpm installation note (#​1089) by @​skoch13
• docs: improve wording of run, files, and files-global config descriptions, document that the sh shell is used (#​1086) by @​ItsHarper
• docs: 404 for local-config (#​1082) by @​rammanoj
• docs: fix typo (#​1079) by @​eai04191

nodejs/node (aqua:nodejs/node)

v26.2.0: 2026-05-20, Version 26.2.0 (Current), @​aduh95

Compare Source

Notable Changes

• [189d43a193] - doc: mark stream.compose stable (Matteo Collina) #​62562
• [f858c6140e] - (SEMVER-MINOR) fs: add Temporal.Instant support to Stats and BigIntStats (Livia Medeiros) #​60789
• [0cbb3895df] - (SEMVER-MINOR) http: add writeInformation to send arbitrary 1xx status codes (Tim Perry) #​63155

Commits

• [9a394bab84] - benchmark: respect stream/iter broadcast backpressure (Trivikram Kamat) #​63314
• [ad98b4620b] - crypto: align verifyOneShot accepted types (Anshika Jain) #​63280
• [ba0736a847] - crypto: wire ML-DSA and ML-KEM for use when using BoringSSL (Filip Skokan) #​63255
• [5573a6a4a8] - crypto: wire ChaCha20-Poly1305 in Web Cryptography when using BoringSSL (Filip Skokan) #​63255
• [7dc563b8d6] - crypto: wire AES-KW in Web Cryptography when using BoringSSL (Filip Skokan) #​63255
• [b55e2b1f4d] - crypto: improve system certificate enumeration logic on macOS (Robo) #​62576
• [fd509a755a] - crypto: harden CryptoKey algorithm slots (Filip Skokan) #​63111
• [8657df39e7] - crypto: harden KeyObject internal slots (Filip Skokan) #​63111
• [729274e046] - crypto: reject invalid raw key imports (Filip Skokan) #​63134
• [8fc9cb9c01] - crypto: improve accuracy of SubtleCrypto.supports (Filip Skokan) #​63104
• [288065cb3f] - crypto: optimize normalizeAlgorithm dispatch hot path (Filip Skokan) #​62756
• [ecf3797d09] - debugger: disambiguate probe location binding (Joyee Cheung) #​63286
• [bdc57135fd] - debugger: add --help to node inspect and improve docs (Joyee Cheung) #​63201
• [2a6e6058e9] - deps: update undici to 8.3.0 (Node.js GitHub Bot) #​63377
• [327b927271] - deps: update corepack to 0.35.0 (Node.js GitHub Bot) #​63375
• [5828fadf52] - deps: update sqlite to 3.53.1 (Node.js GitHub Bot) #​63217
• [fe127a999b] - deps: update simdjson to 4.6.4 (Node.js GitHub Bot) #​62811
• [a34c4ea159] - deps: V8: cherry-pick 435a2cd (Matthias Liedtke) #​63136
• [ad91efcc43] - deps: cherry-pick libuv/libuv@a43e543 (Ali Hassan) #​63222
• [5ea6c3ee7e] - deps: add missing static linking targets for libffi (Paolo Insogna) #​63168
• [c1f6ba22b4] - deps: update ngtcp2 to 1.22.1 (Node.js GitHub Bot) #​62812
• [7b8767ef76] - doc: remove unsupported template type from v8.md (René) #​63410
• [b2ec1880b1] - doc: fix promise nomenclature in stream_iter.md (Antoine du Hamel) #​63406
• [cf6cbbd39d] - doc: fix article usage before vowel-sound acronyms (joao-oliveira-softtor) #​62696
• [da05065d98] - doc: remove the bi-monthly contributor spotlight section (Claudio Wunder) #​62734
• [c31f320fba] - doc: update http2's push and trailers events with rawHeaders param (YuSheng Chen) #​63259
• [f0d008439b] - doc: add Rust toolchain manual installation instructions Windows (Mike McCready) #​63367
• [68b1220fbd] - doc: remove inactive members from Triagers list (Antoine du Hamel) #​63329
• [189d43a193] - doc: mark stream.compose stable (Matteo Collina) #​62562
• [c4fb894039] - doc: fix CHANGELOG (Richard Lau) #​63292
• [9f319a77e4] - doc: reference correct function in Module docs (Robin Malfait) #​63247
• [2c13acc88e] - doc: replace Visual Studio 2022 Evergreen version reference with 17.14 (Mike McCready) #​63211
• [7e42c336c9] - doc: recommend explicitly Tier 1 or 2 for production applications (Mike McCready) #​63187
• [d99e0bb6d5] - doc: document Temporal configure flags in BUILDING.md (ChrisJr404) #​63248
• [c0ea77b305] - doc: run license-builder (github-actions[bot]) #​63232
• [8265aba0f4] - doc: add large pull requests contributing guide (Matteo Collina) #​62829
• [be241bacc8] - doc: remove unnecessary <!-- eslint- magic comments (Antoine du Hamel) #​63200
• [e0b1f092c3] - doc: fix inconsistencies in CJS code snippets (Antoine du Hamel) #​63199
• [a3feb15871] - doc: clarify SEA platform support excludes darwin-x64 (MJSHANG) #​63181
• [cafd7667fc] - doc: improve quic documentation (James M Snell) #​63157
• [3c784edb6f] - doc: update release steps when post-release fails (Rafael Gonzaga) #​63131
• [9de954e9be] - doc: fix deprecation list in 26.0.0 changelog (Antoine du Hamel) #​63147
• [20c553e456] - doc: add Hmac.digest() documentation-only deprecation (DEP0206) (Anshika Jain) #​63121
• [3494eae2c8] - doc: document the latest-vX.x schema (Marco Ippolito) #​63033
• [c02413d29d] - doc: remove list of versions in BUILDING.md (Antoine du Hamel) #​63113
• [[53f9a902a1](https://redirect.github.com/nodejs/

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.