[renovate]

This PR contains the following updates:

Package	Type	Update	Change
prek	tools	patch	0.5.7 → 0.5.9

---

Release Notes

j178/prek (prek)

v0.5.9

Compare Source

Released on 2026-10-30.

Enhancements

• Add normalize-indentation builtin hook (#​2967)
• Allow overriding the uv install version (#​2923)
• Embed dependency metadata in release binaries (#​2976)
• Select musl Bun builds when glibc is unavailable (#​2972)

Performance

• Improve workspace discovery performance (#​2936)

Bug fixes

• Preserve clean-filtered files during stashing (#​2915)

Contributors

• @​j178
• @​tchernobog

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • Between day 1 and 14 of the month, every 6 months (* * 1-14 */6 *)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[artidezi-etke-cc]

Approved: no adaptation is required under the configured project policy.

Approve unchanged: the PR only updates the development hook runner prek from 0.5.7 to 0.5.9. Its merge base equals the recorded target, and the existing hook configuration and mise shim installer remain compatible. Focused local checks passed; supplied source CI reports successful php and frontend checks. Full application checks and audits were not rerun locally for this tool-only update.

Agent-assessed risk: Low. The change affects only development hook tooling, with successful configuration and isolated hook installation/execution checks and no application runtime changes.

Evidence (6 items)

• Local check: git diff 45802b12776ff85cad551bd4420fa76dd93aa507...refs/artidezi/inputs/source-pr; git merge-base 45802b12776ff85cad551bd4420fa76dd93aa507 refs/artidezi/inputs/source-pr; git diff --check 45802b12776ff85cad551bd4420fa76dd93aa507...refs/artidezi/inputs/source-pr — Only mise.toml changes, prek 0.5.7 to 0.5.9; merge base is the target itself, so there is no target divergence to reconcile. Diff whitespace check passed. No workflow, lockfile, runtime image or asset changes.
• Changelog: source — The 0.5.9 section directly follows 0.5.7. Changes add optional functionality, improve workspace discovery and preserve clean-filtered files during stashing; no migration is documented. Existing configuration uses builtin and local system hooks, so uv/Bun installer changes do not affect these hooks.
• Local check: MISE_DATA_DIR="$PWD/var/mise" MISE_TRUSTED_CONFIG_PATHS="$PWD" mise install prek@​0.5.9; mise exec prek@​0.5.9 -- prek --version; mise exec prek@​0.5.9 -- prek validate-config .pre-commit-config.yaml (same environment) — Installation succeeded from the upstream prebuilt Linux GNU artifact; binary reports prek 0.5.9 and repository configuration validation passed. Explicit version selection avoided changing the checkout pin.
• Local check: Isolated temporary Git fixture using source-ref mise.toml, .pre-commit-config.yaml and justfile: git add these files; just prek-install-git-pre-commit-hook; .git/hooks/pre-commit; just prek run --all-files; git diff --exit-code — All commands passed using the project-local mise data directory. Assertions confirmed the generated hook marker and PREK shim substitution plus both mise environment exports. Builtin hooks applicable to these three files passed without changes; check-json and PHP/Twig/JS system hooks skipped because no applicable files were present. This tests installer and changed-pin behavior, not application analysis or asset builds.
• Evidence: Supplied source CI snapshot at c978141c7ee27ab895ccde09739b6f2ec5afa70f — Reports completed successful php and frontend check runs. These are supplied point-in-time results, not locally reproduced or independently refreshed. Composer validation/audit, PHPStan, PHP/Twig style, npm audit, lint, type checking and asset build were not run locally; unchanged application suites were not duplicated. Browser and Nagios exercises are inapplicable to this development-tool pin change.
• Local check: git status --porcelain; git rev-parse HEAD — Working tree is clean and HEAD remains the recorded target base; no commits or checkout changes were made.

Assessed source c978141c7ee27ab895ccde09739b6f2ec5afa70f.