Skip to content

build(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates - #110

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-github_actions-github-actions-minor-patch-1a1669f99e
Open

build(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates#110
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-github_actions-github-actions-minor-patch-1a1669f99e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-minor-patch group with 2 updates in the / directory: actions/checkout and jdx/mise-action.

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates jdx/mise-action from 4.2.0 to 4.2.5

Release notes

Sourced from jdx/mise-action's releases.

v4.2.5: Resilient mise downloads with automatic retries

A small patch release that makes setup more resilient to transient network failures when downloading mise.

Fixed

Retry mise downloads after transient failures (#597 by @​jdx)

The download helpers previously made a single curl or wget attempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see #596).

Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.

Full Changelog: jdx/mise-action@v4.2.4...v4.2.5

v4.2.4: Reliable locking detection under forced color

A small patch release that fixes locking-support detection when workflows force colored output.

Fixed

Detect mise install --locked reliably under forced color (#580 by @​scop)

When colored output was forced globally (for example via CLICOLOR_FORCE=1), ANSI escape codes in mise install --help prevented the action from matching --locked in the help text, so locking support was reported as unavailable even on versions of mise that supported it.

The help probe now runs with NO_COLOR=1 in its environment, which overrides CLICOLOR_FORCE and guarantees plain-text output for the feature detection — regardless of the surrounding workflow's color settings.

Full Changelog: jdx/mise-action@v4.2.3...v4.2.4

v4.2.3: Restore mise PATH propagation

A patch release that restores mise's PATH propagation to subsequent workflow steps — without reintroducing the full-PATH snapshot behavior that v4.2.1 fixed.

Fixed

Export mise PATH entries to subsequent steps (#575) by @​jdx

v4.2.1 stopped exporting the complete PATH returned by mise env --json into GITHUB_ENV, which correctly prevented snapshotting the runner's environment into subsequent steps. However, that also dropped mise-produced PATH entries — tool shims, [env] _.path directories, and similar — that workflows relied on after the setup step. See #565.

The action now computes only the prefix that mise prepended to the existing PATH and forwards those directories individually through GITHUB_PATH. This preserves mise's configured ordering, composes cleanly with PATH changes from other actions, and never persists the runner's full PATH through GITHUB_ENV. The dotenv fallback path (used with older mise versions) also strips PATH= lines and re-derives additions from mise env --json.

A new export_path input (default true) lets workflows keep regular env exports while opting out of PATH changes:

- uses: jdx/mise-action@v4
  with:
    export_path: false # keep env vars, skip mise PATH additions

Full Changelog: jdx/mise-action@v4.2.2...v4.2.3

v4.2.2: Zstd tar fallback for older runners

A small patch release that fixes archive selection on runners with an older tar and corrects a stale default in the README.

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

4.3.0 - 2026-08-24

🚀 Features

4.2.5 - 2026-08-13

🐛 Bug Fixes

4.2.4 - 2026-08-01

🐛 Bug Fixes

  • locking support detection with force-colored output (#580) by @​scop in #580

4.2.3 - 2026-07-24

🐛 Bug Fixes

4.2.2 - 2026-07-24

🐛 Bug Fixes

📚 Documentation

New Contributors

4.2.1 - 2026-07-16

... (truncated)

Commits
  • 3c2e0cf chore: release v4.2.5 (#598)
  • 9dda395 fix: retry mise downloads after transient failures (#597)
  • 9d2b311 chore(deps): update github/codeql-action action to v4.37.6 (#593)
  • 4213fbb chore(deps): update jdx/mise-action action to v4.2.4 (#594)
  • 672dbd2 chore(deps): update zizmorcore/zizmor-action action to v0.6.2 (#595)
  • 5159765 chore(deps): lock file maintenance (#592)
  • c75b4f6 chore(deps): update jdx/mise-action action to v4.2.3 (#590)
  • 367cc0d chore(deps): update github/codeql-action action to v4.37.3 (#589)
  • 90e6e66 chore(deps): update zizmorcore/zizmor-action action to v0.6.1 (#591)
  • 7350bb8 chore(deps): lock file maintenance (#588)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026
@dependabot
dependabot Bot requested review from a team and saliceti as code owners July 27, 2026 05:07
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026
@dependabot dependabot Bot changed the title build(deps): bump the github-actions-minor-patch group with 2 updates build(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates Jul 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot-github_actions-github-actions-minor-patch-1a1669f99e branch 3 times, most recently from 70c0d7b to 95d5d54 Compare August 3, 2026 08:40
@dependabot
dependabot Bot force-pushed the dependabot-github_actions-github-actions-minor-patch-1a1669f99e branch from 95d5d54 to 2a173ff Compare August 10, 2026 05:09
@dependabot
dependabot Bot force-pushed the dependabot-github_actions-github-actions-minor-patch-1a1669f99e branch from 2a173ff to d4959ef Compare August 24, 2026 05:10
@dependabot
build(deps): bump the github-actions-minor-patch group across 1 direc…
5134c11 
…tory with 2 updates

Bumps the github-actions-minor-patch group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [jdx/mise-action](https://github.com/jdx/mise-action).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `jdx/mise-action` from 4.2.0 to 4.2.5
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@e6a8b39...3c2e0cf)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-patch
- dependency-name: jdx/mise-action
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-github_actions-github-actions-minor-patch-1a1669f99e branch from d4959ef to 5134c11 Compare August 25, 2026 12:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@saliceti saliceti Awaiting requested review from saliceti saliceti is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants