Add mise version pinning custom manager by zeitlinger · Pull Request #43 · grafana/flint

zeitlinger · 2026-02-20T17:55:14Z

Summary

Add renovate custom manager for mise version+sha256 pinning in GitHub Actions workflows
Add weekly schedule package rule for mise updates
Applied to both default.json (shared preset) and inline renovate.json5 (for flint itself)

Test plan

Verify renovate detects mise version pins in workflow files
Verify weekly schedule is respected

The mise custom manager and package rule are now centralized in grafana/flint (grafana/flint#43). Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Copilot

Pull request overview

This PR adds a Renovate custom manager to handle mise version pinning with SHA256 checksums in GitHub Actions workflows. The implementation includes both the shared preset configuration (default.json) and the repository-specific configuration (.github/renovate.json5), along with weekly scheduling rules for mise updates.

Changes:

Added custom regex manager to detect and update mise version + sha256 combinations in workflow files
Added weekly schedule package rule for mise updates (before 4am on monday)

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File	Description
default.json	Added mise custom manager regex and weekly schedule rule to shared preset
.github/renovate.json5	Added mise custom manager regex and weekly schedule rule for flint repository

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-20T17:59:16Z

+			"matchPackageNames": ["jdx/mise"],
+			"groupName": "mise",
+			"description": "Only update mise once a week",
+			"schedule": ["before 4am on monday"]


Inconsistent day capitalization in schedule. The renovate package rule on line 41 uses "Monday" with a capital M, while this uses "monday" with a lowercase m. For consistency, these should match.

Suggested change

"schedule": ["before 4am on monday"]

"schedule": ["before 4am on Monday"]

Accepted — fixed capitalization to Monday.

Copilot · 2026-02-20T17:59:17Z

+			"packageNameTemplate": "jdx/mise",
+			"depNameTemplate": "mise",
+			"matchStrings": [
+				"jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"


The regex pattern expects mise-action usage with with:, version:, and sha256: fields in the workflow YAML. However, the actual usage in .github/workflows/lint.yml line 24 shows uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 without any with: block containing version and sha256 fields. This custom manager will not match the current workflow format and won't be able to update mise-action. The regex pattern needs to be updated to match the actual usage pattern, or the workflow file needs to be updated to use the version/sha256 format expected by this regex.

Suggested change

"jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"

"^\\s*uses:\\s*jdx/mise-action@(?<currentDigest>[a-f0-9]{40})\\s*#\\s*(?<currentValue>v\\S+)"

Rejected — the regex is intentionally for version: + sha256: pinning, not the action SHA. The lint.yml in this same PR was updated to include with: version: / sha256:, and the renovate linter confirms the match (mise now appears in renovate-tracked-deps.json).

Copilot · 2026-02-20T17:59:17Z

+      packageNameTemplate: "jdx/mise",
+      depNameTemplate: "mise",
+      matchStrings: [
+        'jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: ["\']?(?<currentValue>v[.\\d]+)["\']?\\s*\\n\\s*sha256: ["\']?(?<currentDigest>\\w+)["\']?',


The regex pattern expects mise-action usage with with:, version:, and sha256: fields in the workflow YAML. However, the actual usage in .github/workflows/lint.yml line 24 shows uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 without any with: block containing version and sha256 fields. This custom manager will not match the current workflow format and won't be able to update mise-action. The regex pattern needs to be updated to match the actual usage pattern, or the workflow file needs to be updated to use the version/sha256 format expected by this regex.

Suggested change

'jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: ["\']?(?<currentValue>v[.\\d]+)["\']?\\s*\\n\\s*sha256: ["\']?(?<currentDigest>\\w+)["\']?',

'jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: ["\']?(?<currentValue>v[.\\d]+)["\']?\\s*\\n\\s*sha256: ["\']?(?<currentDigest>\\w+)["\']?',

'uses:\\s*jdx/mise-action@(?<currentDigest>[a-f0-9]{40})\\s*#\\s*(?<currentValue>v[.\\d]+)',

Rejected — same as above. The lint.yml was updated in this PR to include version: + sha256:, and the renovate linter confirms the regex matches correctly.

Centralize the renovate custom manager for mise version+sha256 pinning in GitHub Actions workflows so all repos that extend flint get automatic updates. Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

- Capitalize "Monday" consistently in mise schedule rule - Add mise to renovate-tracked-deps.json (now detected via custom manager) Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

## Summary - Pin mise `version` and `sha256` in all workflow files for reproducibility and supply-chain security - Renovate will keep these up to date via the custom manager in [grafana/flint#43](grafana/flint#43) ## Test plan - [ ] CI passes with pinned mise version --------- Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

## Summary - Remove mise custom manager and package rule from this repo's renovate config - These are now centralized in [grafana/flint#43](grafana/flint#43) ## Test plan - [ ] Verify renovate still picks up mise version updates after flint PR merges --------- Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

## Summary - Pin mise `version` and `sha256` in all workflow files for reproducibility and supply-chain security - Renovate will keep these up to date via the custom manager in [grafana/flint#43](grafana/flint#43) ## Test plan - [ ] CI passes with pinned mise version --------- Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Copilot AI review requested due to automatic review settings February 20, 2026 17:55

Copilot started reviewing on behalf of zeitlinger February 20, 2026 17:55 View session

zeitlinger mentioned this pull request Feb 20, 2026

Remove mise renovate rules now provided by flint grafana/otel-checker#217

Merged

1 task

Copilot AI reviewed Feb 20, 2026

View reviewed changes

Add mise version pinning custom manager for renovate

ccc10af

Centralize the renovate custom manager for mise version+sha256 pinning in GitHub Actions workflows so all repos that extend flint get automatic updates. Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

zeitlinger force-pushed the centralize-mise-renovate branch from 0c14a2d to ccc10af Compare February 20, 2026 17:59

zeitlinger added 2 commits February 20, 2026 19:21

Fix Monday capitalization, update tracked deps

11d1db1

- Capitalize "Monday" consistently in mise schedule rule - Add mise to renovate-tracked-deps.json (now detected via custom manager) Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

Fix prettier formatting in renovate.json5

a891be7

Signed-off-by: Gregor Zeitlinger <gregor.zeitlinger@grafana.com>

zeitlinger merged commit 5bbf2d0 into main Feb 20, 2026
8 checks passed

zeitlinger deleted the centralize-mise-renovate branch February 20, 2026 18:27

This was referenced Apr 16, 2026

chore: release v0.20.2 #181

Closed

chore: release v0.20.2 #183

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add mise version pinning custom manager#43

Add mise version pinning custom manager#43
zeitlinger merged 3 commits intomainfrom
centralize-mise-renovate

zeitlinger commented Feb 20, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 20, 2026

Uh oh!

zeitlinger Feb 20, 2026

Uh oh!

Copilot AI Feb 20, 2026

Uh oh!

zeitlinger Feb 20, 2026

Uh oh!

Copilot AI Feb 20, 2026

Uh oh!

zeitlinger Feb 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	"schedule": ["before 4am on monday"]
	"schedule": ["before 4am on Monday"]

	"jdx/mise-action.\\n\\swith:\\s\\n\\sversion: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s\\n\\ssha256: [\"']?(?<currentDigest>\\w+)[\"']?"
	"^\\suses:\\sjdx/mise-action@(?<currentDigest>[a-f0-9]{40})\\s#\\s(?<currentValue>v\\S+)"

	'jdx/mise-action.\\n\\swith:\\s\\n\\sversion: ["\']?(?<currentValue>v[.\\d]+)["\']?\\s\\n\\ssha256: ["\']?(?<currentDigest>\\w+)["\']?',
	'jdx/mise-action.\\n\\swith:\\s\\n\\sversion: ["\']?(?<currentValue>v[.\\d]+)["\']?\\s\\n\\ssha256: ["\']?(?<currentDigest>\\w+)["\']?',
	'uses:\\sjdx/mise-action@(?<currentDigest>[a-f0-9]{40})\\s#\\s*(?<currentValue>v[.\\d]+)',

Conversation

zeitlinger commented Feb 20, 2026

Summary

Test plan

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

zeitlinger Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

zeitlinger Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

zeitlinger Feb 20, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants