From bd23dd175c8745d934e6c59dd386dd9c9e19c836 Mon Sep 17 00:00:00 2001
From: Christopher Albert <albert@tugraz.at>
Date: Wed, 21 Oct 2026 19:14:17 +0200
Subject: [PATCH 1/2] Use bounded Fo verification in the shared commit hook

---
 scripts/setup/pre-commit | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/setup/pre-commit b/scripts/setup/pre-commit
index faaa478..3a5e10c 100755
--- a/scripts/setup/pre-commit
+++ b/scripts/setup/pre-commit
@@ -62,7 +62,7 @@ except (OSError, ValueError, KeyError, AttributeError):
     pass
 ' "$hook_dir/fo-latest.json" || true
     fi
-    fo hook pre-commit
+    fo hook pre-commit --bounded
   fi
 fi
 

From 2d446932127e0fcaffb71e982d568f98ec36aef6 Mon Sep 17 00:00:00 2001
From: Christopher Albert <albert@tugraz.at>
Date: Tue, 27 Oct 2026 18:45:57 +0100
Subject: [PATCH 2/2] Update the shared hook installer checksum

---
 scripts/setup/git-hooks.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/setup/git-hooks.sh b/scripts/setup/git-hooks.sh
index 7aa6b9f..ffdf665 100755
--- a/scripts/setup/git-hooks.sh
+++ b/scripts/setup/git-hooks.sh
@@ -10,7 +10,7 @@ for tool in git python3 curl install mktemp; do
 done
 revision=04da3fc73d9ead713b93700de7bbf54049b5ac3e
 checker_sha256=849afd7097350fde0af1863c258bad09a6b75d9a378266001798335232046e59
-hook_sha256=7d5cd9daa40ffca2b7526657f0f4aa169c125d65e448007a8dfa840894ba8eee
+hook_sha256=6591b9a9954c878131ecf9fea97bc9e8c431007401dd7cf671d9fa9c72453eeb
 dest="$HOME/.local/share/git-hooks"
 if [[ "${1:-}" == --dry-run ]]; then
   printf 'Would install global repository hygiene %s at %s\n' "$revision" "$dest"