chore: release v2.7.0

CHANGELOG.md

@@ -1,5 +1,50 @@
 # Changelog
 
+## [2.7.0](https://github.com/jdx/hk/compare/v2.6.0..v2.7.0) - 2026-10-16
+
+### 🚀 Features
+
+- **(builtins)** report jactionlint findings as SARIF and apply its fixes by [@jdx](https://github.com/jdx) in [#1687](https://github.com/jdx/hk/pull/1687)
+- **(builtins)** add Herb formatter and linter by [@beauraF](https://github.com/beauraF) in [#1706](https://github.com/jdx/hk/pull/1706)
+- **(builtins)** add ansible-lint linter by [@illesnagy1](https://github.com/illesnagy1) in [#1707](https://github.com/jdx/hk/pull/1707)
+- **(builtins)** add packer fmt formatter by [@illesnagy1](https://github.com/illesnagy1) in [#1708](https://github.com/jdx/hk/pull/1708)
+- **(step)** add profile_condition to enable steps with and/or/not over profiles by [@jdx](https://github.com/jdx) in [#1684](https://github.com/jdx/hk/pull/1684)
+- **(validate)** add --json output and --deny-warnings to fail on warnings by [@jdx](https://github.com/jdx) in [#1699](https://github.com/jdx/hk/pull/1699)
+
+### 🐛 Bug Fixes
+
+- **(builtins)** stop passing file arguments to brakeman by [@beauraF](https://github.com/beauraF) in [#1704](https://github.com/jdx/hk/pull/1704)
+- **(config)** keep output.log, hk.log and patches in the repository's git dir by [@jdx](https://github.com/jdx) in [#1705](https://github.com/jdx/hk/pull/1705)
+- **(step)** show rendered findings instead of raw SARIF in failed check output by [@jdx](https://github.com/jdx) in [#1695](https://github.com/jdx/hk/pull/1695)
+
+### 📚 Documentation
+
+- refresh competitor benchmark for v2.6.0 by [@jdx](https://github.com/jdx) in [#1688](https://github.com/jdx/hk/pull/1688)
+
+### 🛡️ Security
+
+- **(ci)** remove claude-code-action workflow by [@jdx](https://github.com/jdx) in [#1694](https://github.com/jdx/hk/pull/1694)
+- **(deps)** update mise tools by [@renovate[bot]](https://github.com/renovate[bot]) in [#1689](https://github.com/jdx/hk/pull/1689)
+- **(deps)** bump jactionlint to 2.2.0 and mbx to 1.24.0 by [@jdx](https://github.com/jdx) in [#1700](https://github.com/jdx/hk/pull/1700)
+- recommend oxfmt over prettier in examples and getting started by [@jdx](https://github.com/jdx) in [#1711](https://github.com/jdx/hk/pull/1711)
+
+### 🔍 Other Changes
+
+- **(release)** shorten minimum release age to 2 days by [@jdx](https://github.com/jdx) in [bd30b5d](https://github.com/jdx/hk/commit/bd30b5d7eb3de89e7824292f984beb2e23e19b5c)
+
+### 📦️ Dependency Updates
+
+- update github actions by [@renovate[bot]](https://github.com/renovate[bot]) in [#1690](https://github.com/jdx/hk/pull/1690)
+- update actions/checkout action to v7 by [@renovate[bot]](https://github.com/renovate[bot]) in [#1691](https://github.com/jdx/hk/pull/1691)
+- update dependency preact to v11 by [@renovate[bot]](https://github.com/renovate[bot]) in [#1692](https://github.com/jdx/hk/pull/1692)
+- update node.js to v26.11.1 by [@renovate[bot]](https://github.com/renovate[bot]) in [#1696](https://github.com/jdx/hk/pull/1696)
+- update rustls to 0.23.46 by [@jdx](https://github.com/jdx) in [#1701](https://github.com/jdx/hk/pull/1701)
+- update rust crate usage-rs to v7.0.1 by [@renovate[bot]](https://github.com/renovate[bot]) in [#1702](https://github.com/jdx/hk/pull/1702)
+
+### New Contributors
+
+- @beauraF made their first contribution in [#1706](https://github.com/jdx/hk/pull/1706)
+
 ## [2.6.0](https://github.com/jdx/hk/compare/v2.5.0..v2.6.0) - 2026-10-12
 
 ### 🚀 Features

Cargo.toml

@@ -19,7 +19,7 @@ name = "hk"
 repository = "https://github.com/jdx/hk"
 resolver = "3"
 rust-version = "1.94.0"
-version = "2.6.0"
+version = "2.7.0"
 
 [[bin]]
 name = "generate-docs"

README.md

@@ -28,8 +28,8 @@ You can also install hk with `brew install hk` or `cargo install hk --locked`. T
 This example uses hk’s built-in whitespace utilities, so it needs no additional linter:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["trailing-whitespace"] = Builtins.trailing_whitespace

docs/builtins.md

@@ -12,8 +12,8 @@ Builtins are reusable Pkl step definitions for linters, formatters, and hk’s o
 ## Use a builtin
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 hooks {
   ["check"] {

docs/cli/commands.json

@@ -8509,7 +8509,7 @@
     "sources": {},
     "files": []
   },
-  "version": "2.6.0",
+  "version": "2.7.0",
   "usage": "",
   "complete": {
     "directory": {

docs/cli/index.md

@@ -23,7 +23,7 @@ Start with [getting started](/getting_started) for an end-to-end setup. Command-
 
 **Usage:** `hk [FLAGS] <SUBCOMMAND>`
 
-**Version:** 2.6.0
+**Version:** 2.7.0
 
 ## Global Flags
 

docs/configuration.md

@@ -14,8 +14,8 @@ For a first setup, use [getting started](/getting_started). For complete configu
 A configuration amends hk’s [Pkl schema](/pkl_introduction). For a shared set of linters, prefer top-level `steps`:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["eslint"] = Builtins.eslint
@@ -505,8 +505,8 @@ package {
 ```
 
 ```pkl [hk.pkl]
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["trailing_whitespace"] = Builtins.trailing_whitespace
@@ -604,7 +604,7 @@ Higher layers override lower ones for scalar settings. List settings such as `ex
 Use `~/.config/hk/config.pkl` for defaults and additional steps across projects. The location follows `XDG_CONFIG_HOME` or `HK_CONFIG_DIR` when set.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 jobs = 4
 fail_fast = false

docs/getting_started.md

@@ -70,8 +70,8 @@ This complete example needs no extra tools. The `trailing_whitespace` and `newli
 Replace the contents of the `hk.pkl` that `hk init` generated with this example. If `hk init` detected linters, its steps need those tools on `PATH`; the example below does not.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["trailing_whitespace"] = Builtins.trailing_whitespace

docs/hooks.md

@@ -155,8 +155,8 @@ failure.
 `commit-msg` runs after the message is prepared and before the commit is created. Use the built-in Conventional Commits check:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 hooks {
   ["commit-msg"] {

docs/migrate-husky.md

@@ -95,7 +95,7 @@ npm test
 The same hooks in hk:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["pre-commit"] {

docs/migrate-lefthook.md

@@ -124,7 +124,7 @@ pre-push:
 The same hooks in hk:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["pre-commit"] {

docs/mise_integration.md

@@ -84,7 +84,7 @@ Review the generated tools and tasks. Existing `mise.toml` files are preserved.
 Use a task when a check is also useful outside Git hooks:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["check"] {

docs/pirate/builtins.md

@@ -13,8 +13,8 @@ Builtins be the standing crew who come with the ship: reusable Pkl step definiti
 ## Muster a builtin {#use-a-builtin}
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 hooks {
   ["check"] {

docs/pirate/cli/index.md

@@ -24,7 +24,7 @@ New aboard, sailor? Get under way with [getting started](/getting_started), a se
 
 **How to hail it:** `hk [FLAGS] <SUBCOMMAND>`
 
-**Version:** 2.6.0
+**Version:** 2.7.0
 
 ## Flags flown on every call {#global-flags}
 

docs/pirate/configuration.md

@@ -15,8 +15,8 @@ Getting under way for the first time? Follow [getting started](/getting_started)
 A configuration amends hk's [Pkl schema](/pkl_introduction). For one set of lookouts that every hook shares, prefer top-level `steps`:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["eslint"] = Builtins.eslint
@@ -465,8 +465,8 @@ package {
 ```
 
 ```pkl [hk.pkl]
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["trailing_whitespace"] = Builtins.trailing_whitespace
@@ -564,7 +564,7 @@ For scalar settings, a higher layer's value overrides the ones below it. List se
 Use `~/.config/hk/config.pkl` for defaults and extra steps that sail with ye on every project. The location follows `XDG_CONFIG_HOME` or `HK_CONFIG_DIR` when set.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 jobs = 4
 fail_fast = false

docs/pirate/getting_started.md

@@ -67,8 +67,8 @@ This complete example needs no extra tools. The `trailing_whitespace` and `newli
 Replace the whole of the `hk.pkl` that `hk init` drew up with this example. If `hk init` spotted linters, its steps need those tools aboard on `PATH`; the example below does not.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["trailing_whitespace"] = Builtins.trailing_whitespace

docs/pirate/hooks.md

@@ -156,8 +156,8 @@ failure and hauled back to port.
 `commit-msg` runs after the commit message is prepared and before the commit is made. Use the built-in Conventional Commits check, one of the standing crew:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 hooks {
   ["commit-msg"] {

docs/pirate/migrate-husky.md

@@ -96,7 +96,7 @@ npm test
 The same hooks in hk:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["pre-commit"] {

docs/pirate/migrate-lefthook.md

@@ -125,7 +125,7 @@ pre-push:
 The same hooks in hk:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["pre-commit"] {

docs/pirate/mise_integration.md

@@ -76,7 +76,7 @@ Look over the tools and tasks it drew up. A `mise.toml` that's already aboard is
 Use a task when a check earns its keep outside Git hooks too:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 hooks {
   ["check"] {

docs/pirate/pkl_introduction.md

@@ -14,8 +14,8 @@ Pkl evaluates the charts. Then hk runs the commands those charts set down.
 Every ship's configuration should amend hk's base schema, the base chart every set of charts is drawn over:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 ```
 
 `amends` supplies the properties and classes ye're allowed, such as `Step`, `Hook`, and `Group`. `import` brings another module aboard under its own name, here `Builtins`.
@@ -154,7 +154,7 @@ This is a local amendment of an existing project configuration: yer own marks on
 its path relative to the module doing the importing.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 import* "generated/*.pkl" as generated
 
@@ -174,7 +174,7 @@ add or remove step definitions, signing hands on and off, without editing `hk.pk
 
 ```pkl
 // generated/oxfmt.pkl
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 STEPS: Mapping<String, Config.Step> = new {
   ["oxfmt"] {

docs/pirate/reference/examples/monorepo.md

@@ -46,7 +46,7 @@ lists the subproject directories (literal names or globs):
 
 ```pkl
 // hk.pkl (repo root)
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 subprojects = List("frontend", "backend", "packages/*")
 
@@ -61,8 +61,8 @@ hooks {
 
 ```pkl
 // frontend/hk.pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 local linters = new Mapping<String, Step> {
   // aube resolves these executables from frontend/node_modules/.bin
@@ -87,8 +87,8 @@ hooks {
 
 ```pkl
 // backend/hk.pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 local linters = new Mapping<String, Step> {
   ["cargo-fmt"] = Builtins.cargo_fmt

docs/pkl_introduction.md

@@ -13,8 +13,8 @@ Pkl evaluates configuration. hk then runs the commands that configuration define
 Every project configuration should amend hk’s base schema:
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 ```
 
 `amends` supplies the allowed properties and classes, such as `Step`, `Hook`, and `Group`. `import` makes another module available under its name, here `Builtins`.
@@ -151,7 +151,7 @@ This is a local amendment of an existing project configuration. Save it as `hk.l
 its path relative to the importing module.
 
 ```pkl
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 import* "generated/*.pkl" as generated
 
@@ -171,7 +171,7 @@ add or remove step definitions without editing `hk.pkl`:
 
 ```pkl
 // generated/oxfmt.pkl
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
 STEPS: Mapping<String, Config.Step> = new {
   ["oxfmt"] {

docs/public/custom-linters.pkl

@@ -1,7 +1,7 @@
 /// A custom step using hk's whitespace utility, including check and fix tests.
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["whitespace"] = new Step {

docs/public/javascript-project.pkl

@@ -1,7 +1,7 @@
 /// oxfmt and ESLint, with TypeScript checking enabled by the types profile.
-amends "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Config.pkl"
+amends "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Config.pkl"
 
-import "package://github.com/jdx/hk/releases/download/v2.6.0/hk@2.6.0#/Builtins.pkl"
+import "package://github.com/jdx/hk/releases/download/v2.7.0/hk@2.7.0#/Builtins.pkl"
 
 steps {
   ["eslint"] = Builtins.eslint