From cd51a524ebffbb1ff52e0daef3d4f24fa1fd002a Mon Sep 17 00:00:00 2001
From: Hugo Haas <hugoh@hugoh.net>
Date: Sat, 11 Jul 2026 14:47:30 -0500
Subject: [PATCH] chore: bump hk to 1.50.0

---
 hk.pkl                   | 10 +++++++---
 mise-tasks/clean         |  2 +-
 mise-tasks/lint-deadcode |  2 +-
 mise-tasks/lint-go       |  2 +-
 mise-tasks/test          |  2 +-
 mise.toml                |  4 +++-
 6 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/hk.pkl b/hk.pkl
index 8745dbb..c6f2909 100644
--- a/hk.pkl
+++ b/hk.pkl
@@ -1,9 +1,13 @@
-amends "package://github.com/jdx/hk/releases/download/v1.49.0/hk@1.49.0#/Config.pkl"
-import "package://github.com/jdx/hk/releases/download/v1.49.0/hk@1.49.0#/Builtins.pkl"
-import "package://github.com/hugoh/hk-config/releases/download/v0.1.0/hk-config@0.1.0#/base.pkl" as Base
+amends "package://github.com/jdx/hk/releases/download/v1.50.0/hk@1.50.0#/Config.pkl"
+import "package://github.com/jdx/hk/releases/download/v1.50.0/hk@1.50.0#/Builtins.pkl"
+import "package://github.com/hugoh/hk-config/releases/download/v0.2.1/hk-config@0.2.1#/base.pkl" as Base
+
+min_hk_version = Base.min_hk_version
 
 local linters = new Mapping<String, Step> {
   ...Base.base
+  ["shellcheck"] = Builtins.shellcheck
+  ["shellharden"] = Builtins.shellharden
   ["trailing-ws"] = (Base.base["trailing-ws"]) {
     condition = "false"
   }
diff --git a/mise-tasks/clean b/mise-tasks/clean
index d76a31c..e2f3049 100755
--- a/mise-tasks/clean
+++ b/mise-tasks/clean
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 #MISE description="Clean the project"
 go clean
-rm -f "${COVEROUT}"
+rm -f "$COVEROUT"
diff --git a/mise-tasks/lint-deadcode b/mise-tasks/lint-deadcode
index ac3f05b..6a15d05 100755
--- a/mise-tasks/lint-deadcode
+++ b/mise-tasks/lint-deadcode
@@ -2,7 +2,7 @@
 #MISE description="Check for dead code"
 #MISE sources=["**/*.go"]
 #USAGE flag "--test" help="Include test files"
-if deadcode ${usage_test:+-test} ./... 2>&1 | grep .; then
+if deadcode "${usage_test:+-test}" ./... 2>&1 | grep .; then
   echo 'dead code found'
   exit 1
 fi
diff --git a/mise-tasks/lint-go b/mise-tasks/lint-go
index 113062b..68b85e9 100755
--- a/mise-tasks/lint-go
+++ b/mise-tasks/lint-go
@@ -2,4 +2,4 @@
 #MISE description="Lint Go source"
 #MISE sources=["**/*.go"]
 #USAGE flag "--fix" help="Automatically fix issues"
-golangci-lint run ${usage_fix:+--fix} ./...
+golangci-lint run "${usage_fix:+--fix}" ./...
diff --git a/mise-tasks/test b/mise-tasks/test
index 2def914..63e4d06 100755
--- a/mise-tasks/test
+++ b/mise-tasks/test
@@ -1,4 +1,4 @@
 #!/usr/bin/env bash
 #MISE description="Run tests with coverage"
 #MISE sources=["go.mod", "**/*.go"]
-gotestsum -- -race -shuffle=on -coverprofile="${COVEROUT}" -covermode=atomic ./...
+gotestsum -- -race -shuffle=on -coverprofile="$COVEROUT" -covermode=atomic ./...
diff --git a/mise.toml b/mise.toml
index 1aaa65a..a88088d 100644
--- a/mise.toml
+++ b/mise.toml
@@ -5,7 +5,9 @@ golangci-lint = "2.12.2"
 goreleaser = "2.16.0"
 cocogitto = "7.0.0"
 gotestsum = "1.13.0"
-hk = "1.49.0"
+hk = "1.50.0"
+shellcheck = "0.11.0"
+"aqua:anordal/shellharden" = "4.3.2"
 rumdl = "0.2.22"
 zizmor = "1.26.1"
 dprint = "0.54.0"