Skip to content

chore(deps): bump jdx/mise-action from 4.0.1 to 4.2.3 - #226

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/jdx/mise-action-4.2.1
Open

chore(deps): bump jdx/mise-action from 4.0.1 to 4.2.3#226
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/jdx/mise-action-4.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •
edited by macroscopeapp Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps jdx/mise-action from 4.0.1 to 4.2.3.

Release notes

Sourced from jdx/mise-action's releases.

v4.2.3: Restore mise PATH propagation

A patch release that restores mise's PATH propagation to subsequent workflow steps — without reintroducing the full-PATH snapshot behavior that v4.2.1 fixed.

Fixed

Export mise PATH entries to subsequent steps (#575) by @​jdx

v4.2.1 stopped exporting the complete PATH returned by mise env --json into GITHUB_ENV, which correctly prevented snapshotting the runner's environment into subsequent steps. However, that also dropped mise-produced PATH entries — tool shims, [env] _.path directories, and similar — that workflows relied on after the setup step. See #565.

The action now computes only the prefix that mise prepended to the existing PATH and forwards those directories individually through GITHUB_PATH. This preserves mise's configured ordering, composes cleanly with PATH changes from other actions, and never persists the runner's full PATH through GITHUB_ENV. The dotenv fallback path (used with older mise versions) also strips PATH= lines and re-derives additions from mise env --json.

A new export_path input (default true) lets workflows keep regular env exports while opting out of PATH changes:

- uses: jdx/mise-action@v4
  with:
    export_path: false # keep env vars, skip mise PATH additions

Full Changelog: jdx/mise-action@v4.2.2...v4.2.3

v4.2.2: Zstd tar fallback for older runners

A small patch release that fixes archive selection on runners with an older tar and corrects a stale default in the README.

Fixed

Verify tar supports Zstd before picking .tar.zst (#569 by @​JackMyers001

The action previously chose the .tar.zst mise archive whenever zstd --version succeeded, then extracted it with tar --zstd. On RHEL 8-compatible runners that ship zstd 1.4.4 alongside GNU tar 1.30, the --zstd option isn't recognized and installation failed.

Detection now runs both checks:

zstd --version
tar --zstd --version

If either fails, the action falls back to the .tar.gz archive. No configuration change is required — existing workflows on affected runners just start working again. Fixes #568.

Documentation

  • Update the cache_key_prefix example in the README to reflect the current default of mise-v1 (previously documented as mise-v0) (#570 by @​muzimuzhi).

New Contributors

Full Changelog: jdx/mise-action@v4.2.1...v4.2.2

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

4.2.4 - 2026-07-28

🐛 Bug Fixes

  • locking support detection with force-colored output (#580) by @​scop in #580

4.2.3 - 2026-07-24

🐛 Bug Fixes

4.2.2 - 2026-07-24

🐛 Bug Fixes

📚 Documentation

New Contributors

4.2.1 - 2026-07-16

🐛 Bug Fixes

🔍 Other Changes

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 9e7f763 chore: release v4.2.3 (#578)
  • 0f85637 fix: export mise path entries to subsequent steps (#575)
  • a24c375 chore(deps): migrate to aube lockfile (#576)
  • f10502f chore: release v4.2.2 (#567)
  • 5df6b79 chore(deps): update zizmorcore/zizmor-action action to v0.6.0 (#574)
  • be707ec chore(deps): update jdx/mise-action action to v4.2.1 (#572)
  • d0f7879 chore(deps): update github/codeql-action action to v4.37.1 (#571)
  • fc371b7 docs: update default value of cache_key_prefix (#570)
  • 5c77551 fix: ensure tar supports Zstd (#569)
  • a63ca4f fix(release-plz): exit when git-cliff produces no version bump (#566)
  • Additional commits viewable in compare view

Note

Bump jdx/mise-action from 4.0.1 to 4.2.3 in GitHub Actions workflows

Updates the pinned commit hash for jdx/mise-action in the audit.yml, gate-check.yml, and publish.yml workflows.

Macroscope summarized deaac35.

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests updating dependencies label Jul 22, 2026
@dependabot
dependabot Bot requested a review from KooshaPari as a code owner July 22, 2026 00:51
@dependabot dependabot Bot added the dependencies Pull requests updating dependencies label Jul 22, 2026
@dependabot dependabot Bot mentioned this pull request Jul 22, 2026
Closed
@codeant-ai

codeant-ai Bot commented Jul 22, 2026

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

1 similar comment
@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

@kilo-code-bot

kilo-code-bot Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (3 files)
  • .github/workflows/audit.yml
  • .github/workflows/gate-check.yml
  • .github/workflows/publish.yml

Reviewed by step-3.7-flash · Input: 54.7K · Output: 4.4K · Cached: 181.9K

@dependabot dependabot Bot changed the title chore(deps): bump jdx/mise-action from 4.0.1 to 4.2.1 chore(deps): bump jdx/mise-action from 4.0.1 to 4.2.3 Aug 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/jdx/mise-action-4.2.1 branch from f7e8b87 to 98f46db Compare August 1, 2026 11:39
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

1 similar comment
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/jdx/mise-action-4.2.1 branch from 98f46db to c065314 Compare August 2, 2026 00:18
@github-actions

github-actions Bot commented Aug 2, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

1 similar comment
@github-actions

github-actions Bot commented Aug 2, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

@dependabot
chore(deps): bump jdx/mise-action from 4.0.1 to 4.2.3
deaac35 
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 4.0.1 to 4.2.3.
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@1648a78...9e7f763)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/jdx/mise-action-4.2.1 branch from c065314 to deaac35 Compare August 2, 2026 03:08
@sonarqubecloud

sonarqubecloud Bot commented Aug 2, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Aug 2, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

1 similar comment
@github-actions

github-actions Bot commented Aug 2, 2026

Copy link
Copy Markdown

🔒 Snyk Security Scan Results

Snyk vulnerability scan completed. View results in GitHub Code Scanning dashboard.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@KooshaPari KooshaPari Awaiting requested review from KooshaPari KooshaPari is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests updating dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants