From 2b816739423cbffb1443006d89adb50fb643ab18 Mon Sep 17 00:00:00 2001
From: "elastic-renovate-prod[bot]"
 <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>
Date: Mon, 9 Nov 2026 08:19:40 +0000
Subject: [PATCH 1/2] chore(deps): update pre-commit hook styrainc/regal to v2

---
 .pre-commit-config.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index fbe3b03c4d..0a37825ad1 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -184,7 +184,7 @@ repos:
         files: security-policies/.*\.(md|markdown)$
 
   - repo: https://github.com/StyraInc/regal
-    rev: v0.43.0
+    rev: v2.2.3
     hooks:
       - id: regal-lint
         args: [security-policies/bundle]

From 5f84f21c7d01d80cdac4c67f552b8d49388806fc Mon Sep 17 00:00:00 2001
From: Dmitry Gurevich <dmitry.gurevich@elastic.co>
Date: Mon, 9 Nov 2026 11:43:10 +0200
Subject: [PATCH 2/2] fix(renovate): keep regal pre-commit hook on v0.x

Upstream has stray v2.x tags (v2.2.3 points to a 2024 'Testing versioning' commit)
that are not releases and fail the hook install. Revert the hook to v0.43.0 and
cap regal below v1.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 .pre-commit-config.yaml |  2 +-
 renovate.json           | 10 ++++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ddd67358d2..94a838d597 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -184,7 +184,7 @@ repos:
         files: security-policies/.*\.(md|markdown)$
 
   - repo: https://github.com/StyraInc/regal
-    rev: v2.2.3
+    rev: v0.43.0
     hooks:
       - id: regal-lint
         args: [security-policies/bundle]
diff --git a/renovate.json b/renovate.json
index 6152d12464..f72ffdf639 100644
--- a/renovate.json
+++ b/renovate.json
@@ -687,6 +687,16 @@
         "golangci-lint"
       ]
     },
+    {
+      "description": "Cap regal below v1 - the upstream repo has stray v2.x tags (e.g. v2.2.3, a 2024 'Testing versioning' commit) that are not releases and break the pre-commit hook install. Real releases are v0.x",
+      "matchManagers": [
+        "pre-commit"
+      ],
+      "matchDepNames": [
+        "/^styrainc\\/regal$/i"
+      ],
+      "allowedVersions": "<1.0.0"
+    },
     {
       "description": "Group pre-commit hook rev updates into one PR",
       "matchManagers": [