chore(deps): bump jdx/mise-action from 4.0.1 to 4.1.0 (#154)
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.0.1 to 4.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jdx/mise-action/releases">jdx/mise-action's releases</a>.</em></p> <blockquote> <h2>v4.1.0: automatic --locked installs</h2> <p>This release adds automatic locked installs when a <code>mise.lock</code> is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.</p> <h2>Added</h2> <h3>Automatic <code>--locked</code> install when <code>mise.lock</code> exists (<a href="https://redirect.github.com/jdx/mise-action/pull/495">#495</a>) by <a href="https://github.com/zeitlinger"><code>@zeitlinger</code></a></h3> <p>When a repo contains <code>mise.lock</code>, the action now automatically passes <code>--locked</code> to <code>mise install</code> (on mise versions that support it). This removes the need to manually set <code>install_args: --locked</code> and prevents <code>mise install</code> from silently mutating the lockfile in CI. Explicit <code>install_args</code> and older mise versions are still respected.</p> <p>Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating <code>mise.lock</code> mid-run — this surfaces lockfile drift rather than hiding it.</p> <h2>Fixed</h2> <ul> <li><strong>Cache key collisions across runner providers</strong> (<a href="https://redirect.github.com/jdx/mise-action/pull/456">#456</a>) — the default cache key now includes the runner image (e.g. <code>macos15</code>, <code>ubuntu24</code> for GitHub-hosted runners; <code>self-hosted</code> otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's <code>~/.local/share/mise/installs/*</code>, causing failures like <code>does not have an executable named '…'</code> or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.</li> <li><strong><code>mise-shim.exe</code> missing on Windows</strong> (<a href="https://redirect.github.com/jdx/mise-action/pull/476">#476</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> — the action now installs <code>mise-shim.exe</code> alongside <code>mise.exe</code> and repairs restored caches that lack the shim. Fixes <a href="https://redirect.github.com/jdx/mise-action/issues/475">#475</a>.</li> </ul> <h2>Changed</h2> <ul> <li>Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (<a href="https://redirect.github.com/jdx/mise-action/pull/436">#436</a>). No user-facing behavior change.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jdx/mise-action/compare/v4.0.1...v4.1.0">https://github.com/jdx/mise-action/compare/v4.0.1...v4.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jdx/mise-action/blob/main/CHANGELOG.md">jdx/mise-action's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.0.1..v4.1.0">4.1.0</a> - 2026-06-04</h2> <h3>🚀 Features</h3> <ul> <li>add wings_enabled input (mise-wings cache integration) (<a href="https://redirect.github.com/jdx/mise-action/issues/454">#454</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/454">#454</a></li> <li>lock install when mise.lock is present (<a href="https://redirect.github.com/jdx/mise-action/issues/495">#495</a>) by <a href="https://github.com/zeitlinger"><code>@zeitlinger</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/495">#495</a></li> </ul> <h3>🐛 Bug Fixes</h3> <ul> <li><strong>(ci)</strong> add gh auth setup-git to release-plz.sh (<a href="https://redirect.github.com/jdx/mise-action/issues/473">#473</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/473">#473</a></li> <li><strong>(ci)</strong> pin codeql-action with exact version comment (<a href="https://redirect.github.com/jdx/mise-action/issues/481">#481</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/481">#481</a></li> <li>include runner image in cache key to prevent cross-provider collisions (<a href="https://redirect.github.com/jdx/mise-action/issues/456">#456</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/456">#456</a></li> <li>install mise-shim.exe on Windows (<a href="https://redirect.github.com/jdx/mise-action/issues/476">#476</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/476">#476</a></li> </ul> <h3>⚙️ Miscellaneous Tasks</h3> <ul> <li><strong>(ci)</strong> use !cancelled() instead of always() for final job (<a href="https://redirect.github.com/jdx/mise-action/issues/460">#460</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/460">#460</a></li> <li><strong>(ci)</strong> remove autofix.ci workflow (<a href="https://redirect.github.com/jdx/mise-action/issues/470">#470</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/470">#470</a></li> <li><strong>(ci)</strong> add zizmor workflow for github actions security analysis (<a href="https://redirect.github.com/jdx/mise-action/issues/471">#471</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/471">#471</a></li> <li><strong>(ci)</strong> close failing or conflicted PRs sooner (<a href="https://redirect.github.com/jdx/mise-action/issues/480">#480</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/480">#480</a></li> <li>add communique to enhance release notes (<a href="https://redirect.github.com/jdx/mise-action/issues/411">#411</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/411">#411</a></li> <li>migrate from ncc (CJS) to rollup (ESM) (<a href="https://redirect.github.com/jdx/mise-action/issues/436">#436</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/436">#436</a></li> <li>add final job to aggregate build-test results (<a href="https://redirect.github.com/jdx/mise-action/issues/438">#438</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/438">#438</a></li> <li>migrate package manager from npm/pnpm/bun to aube (<a href="https://redirect.github.com/jdx/mise-action/issues/455">#455</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/455">#455</a></li> <li>remove pull_request_target workflow (<a href="https://redirect.github.com/jdx/mise-action/issues/469">#469</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/469">#469</a></li> <li>update aube tool version (<a href="https://redirect.github.com/jdx/mise-action/issues/501">#501</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/501">#501</a></li> </ul> <hr /> <h2><a href="https://github.com/jdx/mise-action/compare/v4.0.0..v4.0.1">4.0.1</a> - 2026-03-22</h2> <h3>🐛 Bug Fixes</h3> <ul> <li>run npm install in pre-commit hook before build (<a href="https://redirect.github.com/jdx/mise-action/issues/410">#410</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/410">#410</a></li> </ul> <h3>🚜 Refactor</h3> <ul> <li>extract getCwd() helper to deduplicate working directory resolution (<a href="https://redirect.github.com/jdx/mise-action/issues/403">#403</a>) by <a href="https://github.com/altendky"><code>@altendky</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/403">#403</a></li> </ul> <h3>📚 Documentation</h3> <ul> <li>bump versions listed im README.md (<a href="https://redirect.github.com/jdx/mise-action/issues/407">#407</a>) by <a href="https://github.com/deining"><code>@deining</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/407">#407</a></li> <li>bump more versions listed in README.md (<a href="https://redirect.github.com/jdx/mise-action/issues/408">#408</a>) by <a href="https://github.com/deining"><code>@deining</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/408">#408</a></li> </ul> <h3>⚙️ Miscellaneous Tasks</h3> <ul> <li>add workflow to auto-close stale PRs (<a href="https://redirect.github.com/jdx/mise-action/issues/409">#409</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/409">#409</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jdx/mise-action/commit/dba19683ed58901619b14f395a24841710cb4925"><code>dba1968</code></a> chore: release v4.1.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/490">#490</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/f91a09d9ef7e5b4ce6e5df3bd166d39901d95f80"><code>f91a09d</code></a> fix(ci): resolve zizmor findings (<a href="https://redirect.github.com/jdx/mise-action/issues/503">#503</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/a9d72a2ac56857d83f06a89da8b45386a519541e"><code>a9d72a2</code></a> chore(deps): update github/codeql-action action to v4.36.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/500">#500</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/1f56d953238b8d47fa71c5f59d86a41a4f1f9b30"><code>1f56d95</code></a> chore(deps): update dependency <code>@actions/cache</code> to v6.0.1 (<a href="https://redirect.github.com/jdx/mise-action/issues/497">#497</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/e47eed9a5f11d7b1c4e4a27e094fdee05dfb6db3"><code>e47eed9</code></a> chore: update aube tool version (<a href="https://redirect.github.com/jdx/mise-action/issues/501">#501</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/69c24ed9206bc145dcdd8fa072fc6031ceb14c8d"><code>69c24ed</code></a> chore(deps): update dependency aube to v1.15.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/498">#498</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/76f84078a8bb3d593bdc3ba28edbfeea1882fcae"><code>76f8407</code></a> chore(deps): update zizmorcore/zizmor-action action to v0.5.4 (<a href="https://redirect.github.com/jdx/mise-action/issues/488">#488</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/4a84c91c82fa1e7d0a1ea17ff19af79ab26643a1"><code>4a84c91</code></a> chore(deps): update dependency eslint to v10.4.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/492">#492</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/4d5418b7bac561ef4739f99987686d4b21475743"><code>4d5418b</code></a> chore(deps): update dependency <code>@types/node</code> to v24.12.4 (<a href="https://redirect.github.com/jdx/mise-action/issues/485">#485</a>)</li> <li><a href="https://github.com/jdx/mise-action/commit/e6760994f7823b9dc6217632e727fb1ff323c0c0"><code>e676099</code></a> chore(deps): update dependency typescript-eslint to v8.59.3 (<a href="https://redirect.github.com/jdx/mise-action/issues/487">#487</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jdx/mise-action/compare/1648a7812b9aeae629881980618f079932869151...dba19683ed58901619b14f395a24841710cb4925">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
D
dependabot[bot] committed
5f8432b41879900f83010bbda6e14aaeba121eb9
Parent: 04c673a
Committed by GitHub <noreply@github.com>
on 6/12/2026, 10:57:49 PM