Skip to content

chore(deps): bump jdx/mise-action from 2.0.0 to 4.1.0#268

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/jdx/mise-action-4.1.0
Open

chore(deps): bump jdx/mise-action from 2.0.0 to 4.1.0#268
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/jdx/mise-action-4.1.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Bumps jdx/mise-action from 2.0.0 to 4.1.0.

Release notes

Sourced from jdx/mise-action's releases.

v4.1.0: automatic --locked installs

This release adds automatic locked installs when a mise.lock is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.

Added

Automatic --locked install when mise.lock exists (#495) by @​zeitlinger

When a repo contains mise.lock, the action now automatically passes --locked to mise install (on mise versions that support it). This removes the need to manually set install_args: --locked and prevents mise install from silently mutating the lockfile in CI. Explicit install_args and older mise versions are still respected.

Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating mise.lock mid-run — this surfaces lockfile drift rather than hiding it.

Fixed

  • Cache key collisions across runner providers (#456) — the default cache key now includes the runner image (e.g. macos15, ubuntu24 for GitHub-hosted runners; self-hosted otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's ~/.local/share/mise/installs/*, causing failures like does not have an executable named '…' or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.
  • mise-shim.exe missing on Windows (#476) by @​risu729 — the action now installs mise-shim.exe alongside mise.exe and repairs restored caches that lack the shim. Fixes #475.

Changed

  • Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (#436). No user-facing behavior change.

Full Changelog: jdx/mise-action@v4.0.1...v4.1.0

v4.0.1: Documentation and Internal Cleanup

A small maintenance release that updates the README documentation to reflect v4 and cleans up internal code. There are no functional changes to the action itself.

Changed

  • Updated all README examples to reference jdx/mise-action@v4, actions/checkout@v6, and current tool versions by @​deining in #407 and #408
  • Extracted getCwd() helper to deduplicate working directory resolution logic (internal refactor, no behavior change) by @​altendky in #403

New Contributors

Full Changelog: jdx/mise-action@v4.0.0...v4.0.1

v3.6.3

What's Changed

New Contributors

Full Changelog: jdx/mise-action@v3.6.2...v3.6.3

v3.6.2

What's Changed

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

Changelog


4.1.0 - 2026-06-04

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks


4.0.1 - 2026-03-22

🐛 Bug Fixes

  • run npm install in pre-commit hook before build (#410) by @​jdx in #410

🚜 Refactor

  • extract getCwd() helper to deduplicate working directory resolution (#403) by @​altendky in #403

📚 Documentation

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • dba1968 chore: release v4.1.0 (#490)
  • f91a09d fix(ci): resolve zizmor findings (#503)
  • a9d72a2 chore(deps): update github/codeql-action action to v4.36.0 (#500)
  • 1f56d95 chore(deps): update dependency @​actions/cache to v6.0.1 (#497)
  • e47eed9 chore: update aube tool version (#501)
  • 69c24ed chore(deps): update dependency aube to v1.15.0 (#498)
  • 76f8407 chore(deps): update zizmorcore/zizmor-action action to v0.5.4 (#488)
  • 4a84c91 chore(deps): update dependency eslint to v10.4.0 (#492)
  • 4d5418b chore(deps): update dependency @​types/node to v24.12.4 (#485)
  • e676099 chore(deps): update dependency typescript-eslint to v8.59.3 (#487)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 2.0.0 to 4.1.0.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@691e684...dba1968)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added ci CI/CD workflow changes dependencies Dependency updates labels Jun 8, 2026
@dependabot dependabot Bot requested a review from a team as a code owner June 8, 2026 03:08
@dependabot dependabot Bot requested review from iap and removed request for a team June 8, 2026 03:08
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Jun 8, 2026

PR author is in the excluded authors list.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 8, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/jdx/mise-action dba19683ed58901619b14f395a24841710cb4925 UnknownUnknown
actions/jdx/mise-action dba19683ed58901619b14f395a24841710cb4925 UnknownUnknown

Scanned Files

  • .github/workflows/contracts-mainnet-readiness.yml
  • .github/workflows/reorg-sim.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci CI/CD workflow changes dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants