Skip to content

chore(deps): update github-actions - #932

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions
Jun 12, 2026
Merged

chore(deps): update github-actions#932
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Type Update
actions/checkout v6.0.2 -> v6.0.3 action patch
jdx/mise-action v4.0.1 -> v4.1.0 action minor

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

jdx/mise-action (jdx/mise-action)

v4.1.0: : automatic --locked installs

Compare Source

This release adds automatic locked installs when a mise.lock is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.

Added

Automatic --locked install when mise.lock exists (#​495) by @​zeitlinger

When a repo contains mise.lock, the action now automatically passes --locked to mise install (on mise versions that support it). This removes the need to manually set install_args: --locked and prevents mise install from silently mutating the lockfile in CI. Explicit install_args and older mise versions are still respected.

Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating mise.lock mid-run — this surfaces lockfile drift rather than hiding it.

Fixed

  • Cache key collisions across runner providers (#​456) — the default cache key now includes the runner image (e.g. macos15, ubuntu24 for GitHub-hosted runners; self-hosted otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's ~/.local/share/mise/installs/*, causing failures like does not have an executable named '…' or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.
  • mise-shim.exe missing on Windows (#​476) by @​risu729 — the action now installs mise-shim.exe alongside mise.exe and repairs restored caches that lack the shim. Fixes #​475.

Changed

  • Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (#​436). No user-facing behavior change.

Full Changelog: jdx/mise-action@v4.0.1...v4.1.0


Configuration

📅 Schedule: (in timezone America/Los_Angeles)

  • Branch creation
    • "after 4pm on thursday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from scottames as a code owner June 12, 2026 05:52
@renovate
renovate Bot enabled auto-merge (squash) June 12, 2026 05:52
@renovate
renovate Bot merged commit 4274b39 into main Jun 12, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/github-actions branch June 12, 2026 05:55
scottames pushed a commit that referenced this pull request Jun 23, 2026
🤖 I have created a release *beep* *boop*
---


## [0.47.0](v0.46.0...v0.47.0)
(2026-06-23)


### Updates & Misc Chores

* **deps:** lock file maintenance
([#934](#934))
([480a323](480a323))
* **deps:** lock file maintenance
([#944](#944))
([ecd0611](ecd0611))
* **deps:** lock file maintenance ⬆️ mise-packages
([#936](#936))
([4e91cb5](4e91cb5))
* **deps:** update ⬆️ aqua-packages
([#920](#920))
([cdc3cab](cdc3cab))
* **deps:** update ⬆️ aqua-packages
([#942](#942))
([aae9b2d](aae9b2d))
* **deps:** update ⬆️ aqua-packages to v4.520.0
([#924](#924))
([f56cfc8](f56cfc8))
* **deps:** update ⬆️ aqua-packages to v4.520.1
([#925](#925))
([1f7eb02](1f7eb02))
* **deps:** update ⬆️ container digests
([#919](#919))
([d241f14](d241f14))
* **deps:** update ⬆️ dagger to v0.21.3
([#921](#921))
([deb7722](deb7722))
* **deps:** update ⬆️ dagger to v0.21.4
([#930](#930))
([fb8c104](fb8c104))
* **deps:** update ⬆️ dagger to v0.21.6
([#941](#941))
([7dd8b50](7dd8b50))
* **deps:** update ⬆️ mise-packages
([#917](#917))
([ef28dfc](ef28dfc))
* **deps:** update ⬆️ mise-packages
([#926](#926))
([39cea80](39cea80))
* **deps:** update ⬆️ mise-packages
([#928](#928))
([fd1f171](fd1f171))
* **deps:** update ⬆️ mise-packages
([#933](#933))
([39d566b](39d566b))
* **deps:** update ⬆️ mise-packages
([#937](#937))
([66f8a50](66f8a50))
* **deps:** update ⬆️ mise-packages
([#939](#939))
([14c1b76](14c1b76))
* **deps:** update ⬆️ mise-packages
([#943](#943))
([9885419](9885419))
* **deps:** update ⬆️ mise-packages
([#945](#945))
([a977547](a977547))
* **deps:** update ⬆️ mise-packages
([#946](#946))
([04963b3](04963b3))
* **deps:** update ⬆️ mise-packages to v2.1.167
([#927](#927))
([a3c34db](a3c34db))
* **deps:** update ⬆️ mise-packages to v2.1.173
([#935](#935))
([f00499e](f00499e))
* **deps:** update busybox docker tag to v1.38.0
([#922](#922))
([17183b0](17183b0))
* **deps:** update dependency gabm/satty to v0.21.1
([#931](#931))
([7937647](7937647))
* **deps:** update github-actions
([#932](#932))
([4274b39](4274b39))
* **deps:** update github-actions to v1.0.5
([#923](#923))
([0fb5abf](0fb5abf))
* **fish/herdr:** abbr
([51defbc](51defbc))
* **mise:** bump herdr 0.6.10
([143e560](143e560))
* **mise:** rm tenv for now - use in specific projects
([aa2d09e](aa2d09e))
* **niri:** ignore focus for Akiflow
([b9d8848](b9d8848))
* **nvim:** disable copilot lsp when not in use
([c7003ea](c7003ea))
* **nvim:** disable precognition
([fa5b3c1](fa5b3c1))
* **nvim:** lazy updates
([d17812a](d17812a))
* **nvim:** lazyvim updates
([afc2bd5](afc2bd5))
* **opencode:** herdr skill allow
([214a427](214a427))
* upgrade trunk ([#918](#918))
([6707f7f](6707f7f))
* upgrade trunk ([#929](#929))
([e8bf723](e8bf723))
* upgrade trunk ([#940](#940))
([8e16875](8e16875))


### Documentation

* **agents:** clarify worktree layout guidance
([86b8150](86b8150))


### Features

* add herdr
([e51f54e](e51f54e))
* **agents:** add ponytail
([a67eedb](a67eedb))
* **fish/herdr:** add workspace abbrs
([7579c8f](7579c8f))
* **fish:** extend project_label +subtitutions
([a70fc16](a70fc16))
* **git:** add layout-aware project labels
([70c2397](70c2397))
* **git:** support normal worktree clone layout
([4d6bbc9](4d6bbc9))
* **herdr:** add worktrunk / worktree helpers
([d9d8ff8](d9d8ff8))
* **herdr:** config
([d2a0633](d2a0633))
* **nono:** opencode-local - additional permissions
([c9ac773](c9ac773))
* **wt:** run trunk to initiate tools (avoid bug)
([57394c6](57394c6))


### Bug Fixes

* **agents/opencode:** symlink agents
([2927595](2927595))
* **aqua:** rm stale entries, force mise use
([c927d63](c927d63))
* **fish/herdr:** respect label on restore
([7dfea09](7dfea09))
* **gh:** attempt in ensuring the use of our wrapper
([c540930](c540930))
* **git:** harden local hook chaining
([e13a5aa](e13a5aa))
* **herdr:** worktree open, use project_label
([6be9dd2](6be9dd2))
* **nono/opencode:** additional permissions
([b878aa5](b878aa5))
* **nono/opencode:** allow prettierc
([ab203cd](ab203cd))
* **nono/opencode:** deprecated overridedeny
([5a052c9](5a052c9))
* **nono/opencode:** git commit signing permission
([c83e852](c83e852))
* **opencode/nono:** permissions
([4c31fe9](4c31fe9))
* **opencode:** perms missing wildcard
([d848d40](d848d40))
* **opencode:** skill perm covers non-config root
([c764871](c764871))
* **opencode:** skill perms
([bb9fbe1](bb9fbe1))
* **renovate:** avoid mise lockfile races
([bf78481](bf78481))


### Code Refactoring

* **chezmoi/git:** move clones to non-bare worktree
([666e468](666e468))
* **nono:** cleanup wrappers
([74a8574](74a8574))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: scottames-github-bot[bot] <162828115+scottames-github-bot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants