🔧 replace husky with prek

[ianardee]

Description

Types of changes

• Docs change / refactoring / dependency upgrade
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Requires a change to the official Guide documentation.

[Copilot]

Copilot review overview

🟡 Changes recommended

Hook installation is incomplete, license enforcement is removed, and Gitleaks scans no content in clean CI checkouts.

Review effort: Balanced
Findings: 2 · 2

Open (4)

• Update prepare script to install prek · New
• Ensure CI Gitleaks scans repository content · New
• Preserve dependency license enforcement · New
• Preserve pre-push checks with stage-specific hooks · New

What changed in this PR

Replaces Husky and Secretlint with prek-managed hooks and Gitleaks.

Changes:

• Adds prek hook configuration.
• Removes Husky hooks and dependencies.
• Consolidates static-analysis checks under prek.

File	Description
prek.toml	Defines TypeScript, package, and secret checks.
package.json	Replaces hook dependencies with prek.
package-lock.json	Adds prek and platform packages.
.husky/​pre-push	Removes the pre-push hook.
.husky/​pre-commit	Removes the pre-commit hook.
.github/​workflows/​_static-analysis.yml	Runs prek and documentation checks.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🔵 Needs a closer look

Hook installation is missing, and the CI Gitleaks hook does not scan the repository.

Review effort: Balanced
Findings: None

Resolved since last review (4)

• Ensure CI Gitleaks scans repository content
• Update prepare script to install prek
• Preserve pre-push checks with stage-specific hooks
• Preserve dependency license enforcement

[Copilot]

Copilot review overview

🟡 Changes recommended

Hook installation, CI secret scanning, and pre-push check coverage are currently incomplete.

Review effort: Balanced
Findings: 1

Open (1)

• Remove obsolete Secretlint configuration · New

[Copilot]

Copilot review overview

🟡 Changes recommended

Local hooks are not installed automatically, and the CI Gitleaks hook scans no files on a clean checkout.

Review effort: Balanced
Findings: 1

Open (1)

• Ensure CI Gitleaks scans checked-out repository content · New

Resolved since last review (1)

• Remove obsolete Secretlint configuration

[Copilot]

Copilot review overview

🟡 Changes recommended

Hook installation and pre-push checks are not preserved, while Betterleaks CI needs reproducible versioning and complete Git history.

Review effort: Balanced
Findings: 1 · 1

Open (2)

• Shallow checkout causes incomplete Betterleaks Git-history scans · New
• CI Betterleaks version is unpinned and diverges from local hooks · New

Resolved since last review (1)

• Ensure CI Gitleaks scans checked-out repository content

[Copilot]

Copilot review overview

🔵 Needs a closer look

Fresh installations do not activate prek, and the former pre-push documentation and test checks are no longer configured.

Review effort: Balanced
Findings: None

Resolved since last review (2)

• Shallow checkout causes incomplete Betterleaks Git-history scans
• CI Betterleaks version is unpinned and diverges from local hooks