Skip to content

fix(deps): update dependency jdx/mise to v2026.4.28#65

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/jdx-mise-2026.x
Open

fix(deps): update dependency jdx/mise to v2026.4.28#65
renovate[bot] wants to merge 1 commit intomainfrom
renovate/jdx-mise-2026.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 8, 2026

This PR contains the following updates:

Package Update Change Pending
jdx/mise patch 2026.4.112026.4.28 2026.5.4 (+4)

Release Notes

jdx/mise (jdx/mise)

v2026.4.28

Compare Source

🐛 Bug Fixes
  • (copr) remove stale pinned image digest and rebuild copr image on Dockerfile changes by @​bestagi in #​9451
  • (task) avoid gix panic when cloning a remote task by commit SHA by @​jdx in #​9473

v2026.4.27

Compare Source

🚀 Features
🐛 Bug Fixes
  • (backend) Don't cache empty version lists by @​c22 in #​9444
  • (shims) compare PATH entries case-insensitively on macOS by @​jdx in #​9468
  • (task) preserve essential env vars under deny_env on Linux by @​jdx in #​9467
Chore
New Contributors
📦 Aqua Registry Updates
New Packages (7)
Updated Packages (5)

v2026.4.25

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
  • (site) add self-hosted page tracker via Cloudflare Worker, drop GoatCounter by @​jdx in #​9430
New Contributors

v2026.4.24

Compare Source

🚀 Features
  • (ls-remote) add prereleases setting and --prerelease flag by @​jdx in #​9415
🐛 Bug Fixes
  • (http) retry transient HTTP failures with backoff and warn on rescue by @​jdx in #​9414
  • (release) purge mise.en.dev CDN zone after each S3 publish by @​jdx in #​9416
📚 Documentation

v2026.4.23

Compare Source

🚀 Features
🐛 Bug Fixes
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2026.4.22

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
🧪 Testing
📦 Aqua Registry

Updated aqua-registry: v4.498.0 -> v4.499.0.

Included aqua-registry releases:

v2026.4.21

Compare Source

🚀 Features
  • (registry) add --security flag to include security info in JSON output by @​jdx in #​9364
🐛 Bug Fixes
📚 Documentation
📦️ Dependency Updates
📦 Registry
Chore
  • (npm-publish) use aube publish instead of npm publish by @​jdx in #​9328
New Contributors

v2026.4.20

Compare Source

🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
Chore
📦 Aqua Registry

Updated aqua-registry: v4.492.0 -> v4.498.0.

Included aqua-registry releases:

v2026.4.19

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
📦 Registry
Chore
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (3)

v2026.4.18

Compare Source

🚀 Features
🐛 Bug Fixes
  • (backend) skip versions host for direct-source backends by @​jdx in #​9245
  • (github) route artifact attestation verification to custom api_url by @​jdx in #​9254
  • (lockfile) use unique temp file for atomic save to avoid concurrent rename race by @​jdx in #​9250
  • (log) drop noisy third-party debug/trace logs by @​jdx in #​9248
  • (progress) disable animated clx output in ci by @​jdx in #​9249
  • (use) honor --quiet and --silent flags by @​jdx in #​9251
  • (vfox) opt backend plugins out of --locked URL check by @​jdx in #​9252
📦 Registry
New Contributors

v2026.4.17

Compare Source

🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
📦 Registry
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (1)

v2026.4.16

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
📦️ Dependency Updates
📦 Registry
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (2)

v2026.4.15

Compare Source

🐛 Bug Fixes
📚 Documentation
📦 Registry
New Contributors
📦 Aqua Registry Updates
Updated Packages (2)

v2026.4.14

Compare Source

Chore

v2026.4.13

Compare Source

🐛 Bug Fixes
📦️ Dependency Updates
New Contributors

v2026.4.12

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
📦 Registry
Chore
New Contributors
📦 Aqua Registry Updates
New Packages (7)
Updated Packages (3)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 8, 2026

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Change: v2026.4.11 → v2026.4.28 (17 patch releases over 17 days)

Major Changes:

  • Multiple bug fixes focused on stability and reliability
  • New opt-in features (pre-release versions, new package managers)
  • Aqua registry updates (new packages and updates)
  • Enhanced security (GitHub/GitLab token scoping improvements)

Breaking Changes:

  • NONE - All changes maintain backward compatibility
  • No deprecated features removed
  • No API changes to existing commands
  • No configuration format changes

Security Fixes:

  • GitHub artifact attestation verification routing improvements (v2026.4.19, v2026.4.21)
  • Auth token scoping fixes for GitHub and GitLab (v2026.4.17, v2026.4.19)
  • Sigstore verification updates (v2026.4.13)

Notable Bug Fixes Relevant to This Project:

  1. v2026.4.23 (#9410): Stop rewriting healthy runtime symlinks - directly benefits this project's symlink creation pattern
  2. v2026.4.24 (#9414): Retry transient HTTP failures with backoff - improves Docker build reliability
  3. v2026.4.23 (#9409): Node musl tarball routing fixes
  4. v2026.4.19 (#9310): Go GOPROXY handling improvements

🎯 Impact Scope Investigation

mise Usage Locations Identified:

  1. Dockerfile (PRIMARY CHANGE):

    • Line 6: ARG MISE_VERSION=2026.4.112026.4.28
    • Used during Docker build to install 5 language runtimes: Node.js, Ruby, Go, Python, Rust
    • Commands used: mise use -g <tool>@<version>, mise settings ruby.compile=false
    • Creates symlinks: /mise/installs/<runtime>/<version>/mise/installs/<runtime>/current
  2. CI/CD Workflows (.github/workflows/ci.yml):

    • Uses jdx/mise-action@v4.0.1 (pinned SHA) - independent of Dockerfile version
    • Installs development tools: Go, golangci-lint, lefthook, hadolint
    • Used in 5 CI jobs: hadolint, lint, build, unit-test, e2e-test
  3. Documentation (CLAUDE.md):

    • Recommends mise install for local development setup
    • No hardcoded version references

Impact on Dependencies:

  • ✅ No impact on other dependencies
  • ✅ mise is a build-time only dependency
  • ✅ Final container image does NOT include mise binary
  • ✅ Only the installed runtime binaries are included in final image

Compatibility Analysis:

  • ✅ Project uses exact version specifications (e.g., node@24.14.1), not fuzzy versions
  • ✅ Project uses standard, stable mise features only
  • ✅ No advanced features (tasks, lockfiles, templates, etc.) in use
  • ✅ Ruby compile=false setting remains supported
  • ✅ Global installation (-g flag) remains unchanged

Code Modification Requirements:

  • NONE - No code changes needed
  • ❌ No configuration changes needed
  • ❌ No runtime behavior changes

💡 Recommended Actions

Immediate Actions:

  1. Safe to merge - No manual intervention required
  2. Verify CI/CD pipeline passes (automated via existing tests)
  3. Verify Docker build completes successfully (automated in e2e-test job)

Verification Checklist (Automated):

  • Docker build completes successfully
  • All 5 language runtimes install correctly (node, ruby, go, python, rust)
  • E2E tests pass on both ubuntu-latest and ubuntu-24.04-arm
  • Lint and unit tests pass

No Manual Migration Required because:

  • This is a patch-level update with full backward compatibility
  • Project uses only stable, core mise features
  • All existing commands and configurations remain valid
  • mise is isolated to build-time with no runtime dependencies

Optional Follow-up:

  • Monitor Docker build times for any performance changes (expected: neutral or improved due to HTTP retry logic)
  • Review CI logs for any new warnings (none expected)

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants