Skip to content

chore(deps): update support-deps - #1532

Merged
bradclawsie merged 1 commit into
mainfrom
renovate/support-deps
Aug 31, 2026
Merged

chore(deps): update support-deps#1532
bradclawsie merged 1 commit into
mainfrom
renovate/support-deps

Conversation

@renovate

@renovate renovate Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
anchore/sbom-action action patch v0.24.0 → v0.24.2
anchore/scan-action action patch v7.4.0 → v7.4.2
defenseunicorns/uds-common patch v1.28.0 → v1.28.1
ghcr.io/stefanprodan/charts/podinfo minor 6.14.1 → 6.15.0
ghcr.io/stefanprodan/podinfo minor 6.14.1 → 6.15.0
github/codeql-action action patch v4.37.8 → v4.37.9
github:goreleaser/goreleaser tools minor 2.17.1 → 2.18.0
golangci-lint tools patch 2.13.1 → 2.13.2
goreleaser/goreleaser minor v2.17.1 → v2.18.0
https://github.com/stefanprodan/podinfo.git minor 6.14.1 → 6.15.0
jdx/mise uses-with patch 2026.8.14 → 2026.8.16
jdx/mise-action action minor v4.2.5 → v4.3.0
node (source) tools minor 24.19.0 → 24.20.0
podinfo minor 6.14.1 → 6.15.0
prometheus-node-exporter (source) patch 4.56.1 → 4.56.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.24.2

Compare Source

Added Features
Additional Changes

(Full Changelog)

v0.24.1

Compare Source

anchore/scan-action (anchore/scan-action)

v7.4.2

Compare Source

Additional Changes

(Full Changelog)

v7.4.1

Compare Source

defenseunicorns/uds-common (defenseunicorns/uds-common)

v1.28.1

Compare Source

Miscellaneous
stefanprodan/podinfo (ghcr.io/stefanprodan/charts/podinfo)

v6.15.0

Compare Source

What's Changed

Full Changelog: stefanprodan/podinfo@6.14.1...6.15.0

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

goreleaser/goreleaser (github:goreleaser/goreleaser)

v2.18.0

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.18.

Changelog

New Features
Security updates
Bug fixes
Documentation updates
Other work

Full Changelog: goreleaser/goreleaser@v2.17.1...v2.18.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

golangci/golangci-lint (golangci-lint)

v2.13.2

Compare Source

Released on 2026-08-28

  1. Bug fixes
    • Decrease cache entropy
  2. Linters bug fixes
    • iface: from 1.5.0 to 1.5.1
    • staticcheck: from 0.8.0 to 0.8.1
    • unparam: from 3f964bc to 2fa3d84
    • canonicalheader: from v1.1.2 to a temporary fork
jdx/mise (jdx/mise)

v2026.8.16

Compare Source

v2026.8.15: : Dotfiles diff and capture, scoped config updates, and per-tool postinstall hooks

Compare Source

This release expands the dotfiles/bootstrap workflow with previews, bulk capture, git-tracked manifests, and profile reconciliation, adds scoped config collection updates and per-tool postinstall hooks, and rounds it out with a large batch of fixes across tasks, schema validation, Windows, lockfiles, and shims.

Highlights

  • Dotfiles management grows a full preview-and-capture workflow: mise bootstrap dotfiles diff, bulk add --changed, git-tracked directory manifests, and automatic reconciliation when a profile switches a target's source.
  • mise config set learns idempotent list updates (--append/--remove) and explicit --global/--system targeting, and mise use gains per-tool --postinstall hooks.
  • Safer upgrades: replaced tool versions now linger for a grace period instead of being deleted immediately, so a bad upgrade is easier to recover from.

Added

  • dotfiles: New mise bootstrap dotfiles diff previews exactly what apply would change without writing anything, printing unified content patches for copy, template, and inline entries and structural summaries for symlinks and directories. Optional target filters use the same selection semantics as apply. (#​12511 by @​jdx)

  • dotfiles: mise bootstrap dotfiles add --changed captures every drifted copy-mode target back into its source in one command, without naming each path. Directory copies, symlinks, templates, and inline content are skipped, and untrusted configs are blocked. (#​12512 by @​jdx)

  • dotfiles: Directory copy and symlink-each entries can now set manifest = "git" to manage only paths returned by git ls-files, so a dotfiles repo that gitignores everything and force-adds selected paths no longer traverses (or links) ignored home-directory content. Links are removed when a file drops out of the index. (#​12523 by @​jdx)

  • dotfiles: symlink-each apply now reconciles stale links when a profile change (for example toggling MISE_ENV between home and work) points a target at a different source. Only links still pointing at the previously recorded source are removed; unmanaged paths and paths desired by another active source are left alone, and dry-run previews the removals. (#​12524 by @​jdx)

  • bootstrap: mise bootstrap --from <git-url> clones a setup/dotfiles repo (into $MISE_DATA_DIR/bootstrap-repo by default, or --from-dir), then runs bootstrap from that checkout. Existing checkouts are reused when the origin matches, --update fast-forwards them, and --dry-run only prints the planned git clone/git pull. (#​12525 by @​jdx)

  • use: mise use --postinstall <COMMAND> attaches a per-tool post-install hook that runs only when that tool is installed or reinstalled. Repeat the flag before each tool to give each its own hook. (#​12609 by @​jdx)

    mise use --postinstall "mbx setup --defaults" mr-boxington

  • config: mise config set gains --append and --remove for list-like keys (append without duplicates, remove matching entries, promote scalars to arrays as needed) while preserving TOML comments and formatting, plus explicit --global/--system targeting for config get/set. Tool postinstall hooks now also receive MISE_CONFIG_FILE, MISE_GLOBAL_CONFIG_FILE, MISE_CONFIG_ROOT, and MISE_PROJECT_ROOT. (#​12603 by @​jdx)

  • config: Templates can now reference config_source, the absolute path of the config file the template lives in (not resolved through symlinks). This lets a shared config symlinked into conf.d add its own real directory to PATH, for example {{ config_source | canonicalize | dirname }}/bin. Available in mise.toml, .tool-versions, [env] directives, and [settings.age]. (#​12454 by @​Marukome0743)

  • task: task_source_files(only_changed=true) returns only the sources written since the task last succeeded, so linters and formatters can run against just what changed. A failed run keeps its files outstanding until the task passes. (#​12470 by @​Marukome0743)

  • outdated: mise outdated --json now includes a release_url field pointing at the release page for the offered version (from the versions host, aqua, GitHub/GitLab, or the rust core plugin). The key is omitted rather than null when no page is available. (#​12494 by @​Marukome0743)

Changed

  • upgrade: mise upgrade no longer deletes the replaced install immediately. When upgrade.auto_prune is on, the old version stays on disk and is scheduled for removal after upgrade.prune_after (default 24h), cleaned up opportunistically on later runs. --prune still removes immediately and --no-prune keeps the old tree with no scheduled cleanup. mise ls surfaces deferred removals. (#​12593 by @​jdx)

Fixed

Performance

  • brew: Homebrew bootstrap bottles are now downloaded concurrently (bounded by MISE_JOBS), while pouring, source builds, and prefix linking stay in dependency order. (#​12604 by @​jdx)

Registry

New tools: pkgx, onefetch, syncthing, ols, spin-framework, cursor-agent, 7zip, mosh, pastel, broot, exiftool, spotify-player, yt-dlp-nightly, and cliamp. magika and sbt now install from their GitHub releases, and pre-commit uses the pipx backend on Windows. Various dependency and OS-limit cleanups were also applied. (#​12272, #​12437, #​12448, #​12484, #​12485, #​12478, #​12486, #​12532, #​12535, #​12533, #​12538, #​12539, #​12542, #​12581, #​12553, #​12567, #​12549)

New Contributors

Full Changelog: jdx/mise@v2026.8.14...v2026.8.15

💚 Sponsor mise

mise is maintained by @​jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.

jdx/mise-action (jdx/mise-action)

v4.3.0: : Install age-filtered mise releases

Compare Source

A small release that adds an opt-in way to hold back from installing brand-new mise releases.

Added
minimum_release_age input (#​604 by @​jdx)

When version is omitted, you can now set minimum_release_age to install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #​603).

- uses: jdx/mise-action@v4
  with:
    minimum_release_age: 7d

It accepts relative durations (24h, 7d, 6mo, 1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit version always takes precedence over minimum_release_age, and invalid dates fail fast.

Full Changelog: jdx/mise-action@v4.2.5...v4.3.0

nodejs/node (node)

v24.20.0: 2026-08-26, Version 24.20.0 'Krypton' (LTS), @​aduh95

Compare Source

Notable Changes
Commits

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner August 31, 2026 20:51
@renovate
chore(deps): update support-deps
8f980b5 
| datasource                 | package                                     | from       | to         |
| -------------------------- | ------------------------------------------- | ---------- | ---------- |
| github-tags                | anchore/sbom-action                         | v0.24.0    | v0.24.2    |
| github-tags                | anchore/scan-action                         | v7.4.0     | v7.4.2     |
| github-tags                | defenseunicorns/uds-common                  | v1.28.0    | v1.28.1    |
| docker                     | ghcr.io/stefanprodan/charts/podinfo         | 6.14.1     | 6.15.0     |
| docker                     | ghcr.io/stefanprodan/podinfo                | 6.14.1     | 6.15.0     |
| github-tags                | github/codeql-action                        | v4.37.8    | v4.37.9    |
| github-releases            | goreleaser/goreleaser                       | v2.17.1    | v2.18.0    |
| github-tags                | golangci/golangci-lint                      | 2.13.1     | 2.13.2     |
| git-tags                   | https://github.com/stefanprodan/podinfo.git | 6.14.1     | 6.15.0     |
| github-release-attachments | jdx/mise                                    | v2026.8.14 | v2026.8.16 |
| github-tags                | jdx/mise-action                             | v4.2.5     | v4.3.0     |
| node-version               | node                                        | v24.19.0   | v24.20.0   |
| helm                       | podinfo                                     | 6.14.1     | 6.15.0     |
| helm                       | prometheus-node-exporter                    | 4.56.1     | 4.56.3     |
@renovate
renovate Bot force-pushed the renovate/support-deps branch from a74e8c9 to 8f980b5 Compare August 31, 2026 21:04
@bradclawsie
bradclawsie merged commit 06cdc3b into main Aug 31, 2026
25 checks passed
@bradclawsie
bradclawsie deleted the renovate/support-deps branch August 31, 2026 21:25
@github-actions github-actions Bot mentioned this pull request Sep 3, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@bradclawsie bradclawsie bradclawsie approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bradclawsie