[dependabot]

Bumps threeal/setup-lefthook-action from 1.0.0 to 1.1.0.

Release notes

Sourced from threeal/setup-lefthook-action's releases.

Version 1.1.0

What's Changed

New Features

• latest version — version: latest now installs the newest Lefthook release instead of failing to download a build named latest.

Improvements

• Clear error for missing builds — when Lefthook has no build of the requested version for the runner's platform and architecture, the action now says so before downloading anything, instead of failing with a curl 404.
• Clearer logs — the log now explains each step and decision, such as which version was picked and whether a cached copy is used, and downloads no longer print curl's progress meter while still reporting errors.

Bug Fixes

• Failed installs — a download that failed or was interrupted is no longer treated as a cached install on a later run on the same runner; it's cleared and downloaded again.
• Unexpected latest-release redirect — if GitHub's latest-release redirect doesn't point at a release tag, the action now fails with an error instead of reading part of the URL as the version.

Development Changes

• Restructured source — the whole flow now lives in src/main.ts, with only the Lefthook release lookups split out.
• Bundler — the action is now built with Rolldown instead of tsup.
• Linting — ESLint now requires TSDoc comments and fails on warnings, and the pre-commit hook checks types first and formats last.
• Toolchain — pnpm and Node.js are now pinned through devEngines in package.json instead of the packageManager field and .npmrc, and pnpm no longer installs peer dependencies automatically.
• Dependabot — npm updates now wait out a one-day cooldown, and Vitest packages are updated together.
• CI — tests now run on macOS 26 runners and check the installed version with lefthook version against the action's output.
• Tooling — pnpm 12, Vitest 5, and other dev dependencies are bumped to their latest versions, along with actions/checkout v7 and threeal/setup-pnpm-action v2.1.0.

Full Changelog: threeal/setup-lefthook-action@v1.0.0...v1.1.0

Commits

• aebc691 test on macos 26 runners (#136)
• 89d3a3a bump rolldown from 1.2.14 to 1.2.16 (#133)
• c8bd122 bump eslint-plugin-jsdoc from 65.3.12 to 65.4.2 (#134)
• b280908 treat an empty version input as not set (#132)
• c0d7176 bump vite from 8.3.4 to 8.3.5 (#121)
• 77d86ed bump @​tsconfig/node24 from 24.0.4 to 24.0.5 (#120)
• 09599ef bump prettier from 3.8.4 to 3.9.10 (#119)
• 80850af update readme for v1.1.0 (#130)
• 63f3875 bump @​types/node from 25.9.1 to 26.6.6 (#118)
• aaff7e5 bump eslint from 10.4.1 to 10.13.0 (#86)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)