Skip to content

chore(deps): update support-deps - #1597

Merged
eoghanriley merged 1 commit into
mainfrom
renovate/support-deps
Oct 13, 2026
Merged

chore(deps): update support-deps#1597
eoghanriley merged 1 commit into
mainfrom
renovate/support-deps

Conversation

@renovate

@renovate renovate Bot commented Oct 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action patch v8.0.1 → v8.0.2
actions/upload-artifact action patch v7.0.1 → v7.0.2
github/codeql-action action patch v4.38.2 → v4.38.3
github:goreleaser/goreleaser tools patch 2.18.2 → 2.18.3
goreleaser/goreleaser patch v2.18.2 → v2.18.3
goreleaser/goreleaser uses-with patch v2.18.2 → v2.18.3
jdx/mise uses-with patch 2026.10.6 → 2026.10.9

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/download-artifact

v8.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

actions/upload-artifact

v7.0.2

Compare Source

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

github/codeql-action

v4.38.3

Compare Source

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188
  • Update default CodeQL bundle version to 2.27.2. #​4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184
goreleaser/goreleaser (github:goreleaser/goreleaser)

v2.18.3

Compare Source

Announcement

Read the official announcement: Announcing GoReleaser v2.18.

Changelog
Bug fixes
Other work

Full Changelog: goreleaser/goreleaser@v2.18.2...v2.18.3

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

jdx/mise

v2026.10.9: : path: tool versions require trust; apt repositories, login items and run0/doas in bootstrap

Compare Source

This release fixes a trust bypass: an untrusted path: tool version could put a directory on PATH. It also adds several bootstrap features: apt repositories and PPAs, macOS login items, rpm-ostree layering on Fedora Atomic, and run0/doas support. Beyond that, it improves mise dot status, adds GitHub OAuth conveniences, and fixes problems across npm, prune, brew and dotfiles sync.

Security

  • path: tool versions now require trust. Before, an untrusted repository could ship node path:./local in .tool-versions or mise.toml. mise activate would then put ./local/bin ahead of your PATH on the next cd, without asking for trust, so a local/bin/git there would run in place of your real git. Configs with a path: version are now skipped until trusted, and you see the usual is not trusted, run mise trust warning. After mise trust, path: works as before. Other version forms are unaffected. Reported by Anthropic and Ada Logics. #​14358
  • mise bootstrap --adopt now rejects repository URLs that embed credentials (a user:TOKEN@ part). It used to quietly fall back to a plain clone, which left the token in .git/config. Use a Git credential helper or SSH agent. #​14315
  • Download file names decoded from URLs (for example tool%2F..%2Fpwned.tar.gz, or C: names on Windows) can no longer point outside the download directory. Ordinary escapes such as %20 still decode. #​14274 (@​JamBalaya56562, @​hktitof)

Added

Bootstrap

  • [bootstrap.apt.sources] declares PPAs and vendor apt repositories next to the packages that come from them. You no longer need a pre-packages hook that runs add-apt-repository. Each source is written as a deb822 file at /etc/apt/sources.list.d/mise-<name>.sources. Its signing key is fetched, trimmed to the fingerprints you declared, and stored inline in that file, so deleting the file removes both the repository and its key. PPAs need only ppa = "owner/name" and are added only on Ubuntu and Ubuntu-based distros, so the same config also works on Debian. Other repositories need uris, key and fingerprint; suites and components are optional. An unpinned apt: package that is installed from the distro is moved to the declared source. Inline keys require apt 2.4 or later (Ubuntu 22.04, Debian 12). #​14306, #​14348

    [bootstrap.apt.sources]
git-core = { ppa = "git-core/ppa" }
fish = { ppa = "fish-shell/release-4" }

[bootstrap.packages]
"apt:git" = "latest"
"apt:fish" = "latest"

  • macOS login items. [bootstrap.macos.login_items] declares the apps listed under "Open at Login". status and plan report missing apps, and mise bootstrap adds them. The list is additive by default, so apps that register themselves are left alone. Set exclusive = true to have the config own the whole list. #​14354

    [bootstrap.macos.login_items]
apps = ["/Applications/Ghostty.app", "~/Applications/Example.app"]

  • Fedora Atomic hosts. On ostree-booted hosts (Silverblue, Bazzite, secureblue, ...), dnf: installs now stop with an explanation instead of failing inside dnf on read-only /usr. To layer packages instead, set system_packages.ostree = "layer". mise then runs one rpm-ostree install for the whole batch and reports layered packages as pending reboot until you reboot. Version pins are skipped, and upgrade points you to rpm-ostree upgrade. #​14353, #​14357

  • run0 and doas for privilege elevation. On hosts without sudo, mise uses the first of sudo, run0 or doas it finds on PATH. To always use a specific one, set system_packages.elevate_with (or MISE_SYSTEM_PACKAGES_ELEVATE_WITH), for example "run0". #​14351

  • dnf package groups. Entries such as "dnf:@development-tools" = "latest" are now installed, upgraded and checked as groups. Before, status always reported them as missing. Environment groups (@^name) are not supported. #​14347

  • Templated [bootstrap.repos] paths. Repo keys can use templates, so each machine can choose its own clone location with a var answered once through mise vars prompt. Unanswered vars use their default. #​14359

    [vars.repos_dir]
default = "~/src"
prompt = "Where should repositories be cloned?"

[bootstrap.repos]
"{{ vars.repos_dir }}/project-a" = { url = "git@github.com:example/project-a.git" }
Tools and backends
  • libc() and avx2() template functions for http: URLs. They let one entry pick -musl and no-AVX2 -baseline builds: append {{ avx2(yes="", no="-baseline") }}{{ libc(gnu="", musl="-musl") }} to the url template after {{ os() }}-{{ arch() }}. mise lock records every variant. #​14298
  • PyPI Simple indexes: when pypi.registry_url is not a /json URL, mise now asks for the PEP 691 JSON format. If the index supports it, upload times come from the index, so minimum_release_age now works with private indexes. HTML-only indexes behave as before. #​14352
  • Rust mirrors: when RUSTUP_UPDATE_ROOT is set, rustup-init is downloaded from {root}/dist/<host-triple>/rustup-init instead of sh.rustup.rs. This lets mirrors such as panamax serve the first download too. mise also forwards RUSTUP_DIST_SERVER and RUSTUP_UPDATE_ROOT from config env to rustup. #​14356
GitHub OAuth

  • github.oauth_copy_code copies the one-time device code to the clipboard during mise token github --oauth, like gh auth login --clipboard. When the setting is unset, mise asks in an interactive terminal. Only the device code is copied, never the token. #​14269

  • github.oauth_cache_get and github.oauth_cache_set keep the long-lived refresh token in a password manager or keychain, so the plaintext cache file holds only the 8-hour access token. Both settings must be set and can only go in global config. An existing cached refresh token moves into the store at the next refresh. If the store can't be read, mise keeps the cached token. If it can't be written, mise warns and keeps the token in the file. #​14360

    [settings.github]
oauth_cache_get = "pass show mise/github-oauth"
oauth_cache_set = "pass insert -m -f mise/github-oauth"
Dotfiles and skills
  • mise dot status output is grouped into sections: Tracking, Repository, Conflicts, Automatic capture and Bootstrap, followed by a "Next steps" list of commands. The table now lists only entries that need attention and counts the rest. Use --verbose/-v to list every entry. --json and --missing are unchanged. #​14361
  • mise dot status now shows tracked entries whose variants don't match this machine as not on this machine (variants: work), instead of plain tracked. In --json, state stays tracked and a reason field is added. #​14266
  • mise skills sync now lists the skill links it creates, plus .mise-skills.json, in the repository's .git/info/exclude, so they stay out of git status. Your hand-written skills are unaffected, and nothing in the repository itself changes. #​14374

Changed

  • Registry: opencode now installs OpenCode 2 from npm (npm:@opencode/cli). opencode@latest moves to v2 on your next upgrade. opencode@1 keeps v1 from aqua. #​14295
  • Go: if go.mod or go.work has an exact go X.Y.Z line and no toolchain line, mise now uses it as the toolchain version and no longer shows the deprecation warning. This matches how Go reads the file. The old advice to add a toolchain line didn't work, because go mod tidy removes it. go X.Y lines without a patch version are still deprecated. #​14308
  • The official -debian Docker image now includes libatomic1, so Node.js 26 installs and runs without extra steps. #​14303

Fixed

Tools, shims and updates
  • auto_update now updates only tools that are already installed. Since 2026.10.7, the first shell prompt could install every lazy tool declared with auto_update. #​14368 (@​ryanrhughes)
  • Downloads started by mise exec, mise x and shims now retry up to http_retries, like mise install. Before, they made a single attempt. Remote version lookups still make one attempt, so shims don't get slower. #​14342
  • npm tools installed from a lockfile in one project no longer show up as missing, or as <version>~aube~<digest>, in another config that requests latest or a version prefix without a lockfile. With install_layout = "identity", unlocked requests get their own plain install, separate from the project's lockfile-built one. The same applies to uv-locked pipx tools. #​14307, #​14309
  • mise prune no longer removes tool versions used only by inline task tools. It also keeps a uv-locked pipx:/pypi: tool's installs for every Python version, not just the one in the current directory. #​14334, #​14335
  • Running reshim in one project no longer deletes [wrappers] command wrappers defined in other projects. #​14355
  • With skills.auto_sync, mise upgrade now relinks agent skills to the new version. Before, the links kept pointing at the replaced install, which prune could then delete. #​14373
  • Remote tasks no longer break commits when they are fetched from a git hook. Their clone was writing over the commit's index (GIT_INDEX_FILE). Fixed by updating gix to 0.89. #​14316 (@​any-victor)
  • Packslip tools whose signing workflow moved, such as aube moving from release-plz.yml to release.yml, now upgrade when both workflows are in the workflow list. mise lock also keeps the signer of a renamed or transferred project. #​14338, #​14362
  • aqua packages that have no repo now print the "cannot list versions" warning once, and it tells you to pin an exact version. #​14336
  • On Windows, the tool-update service no longer opens a console window that stops the updater when you close it. #​14344
Homebrew and system packages
  • Brew bottles now install their etc/var files and run the formula's post_install_steps. For example, openssl@4 now gets its CA bundle and openssl.cnf. Existing files are kept, and the bottle's copy is saved next to them as .default. Protected copy steps (overwrite: false) are respected. #​14272, #​14311
  • On Linux, Homebrew uses_from_macos dependencies are now installed. This fixes runtime errors such as libbz2.so.1.0 missing for brew:chafa. #​14288 (@​itskyf)
  • mise bootstrap no longer runs chown on a Homebrew prefix owned by another non-root user. It stops with an explanation instead. #​14345
  • Casks that mise evaluates itself now support the generate_completions_from_executable stanza. #​14255 (@​pmmmwh)
  • mise oci build no longer runs the host's apt hooks against the image. Those hooks broke non-root builds that install packages such as cmake. #​14296
  • When elevation is unavailable, mise no longer tells you to run privileged helpers that read their plan from stdin, because they can't run on their own. It now tells you to re-run the mise command as root. #​14350
Dotfiles
  • When another machine had saved a profile-variant file while that profile was inactive here, turning the profile on no longer publishes a deletion or reverts the shared file. Status reports it as not applied here, and mise dot pull applies it, or stops with a conflict that you resolve with --take-remote or --keep-local. #​14275
  • After mise bootstrap --adopt, unchanged encrypted files reuse the ciphertext already in history. Before, they were re-encrypted, and mise dot sync paused on a conflict. #​14300
  • When /home is a symlink (Fedora Atomic), adopting now restores config/ entries, and mise dot origin set no longer shows a false "Not portable" warning. #​14315
  • mise dot apply applies entries that write mise's own config first, then plans everything else from the new config. A newly added entry now takes effect in a single run. #​14339
  • mise dot diff now shows per-file hunks, missing files and type mismatches for directory copy entries. #​14333
Schema
  • The JSON schema now accepts [bootstrap.secrets], [bootstrap.groups], [bootstrap.users], and table forms of vars._.file and vars._.source. Editors and linters such as tombi and Taplo no longer flag configs that mise accepts. #​14322, #​14340, #​14383 (@​JamBalaya56562, @​risu729)

Documentation

  • New guidance on when to use mise bootstrap --from versus --adopt, why fish = "auto" is recommended for fish activation, when to use mise dot sync, pull and apply, and how to check from a shim whether a tool is installed. #​14301, #​14304, #​14343, #​14337

Upgrade notes

  • If an untrusted project uses a path: tool version, run mise trust in it.
  • Scripts that parse the default table from mise dot status should add --verbose or switch to --json.
  • opencode@latest moves to OpenCode 2. Pin opencode@1 to stay on v1.
  • mise bootstrap --adopt with a URL that contains credentials now fails. Use a credential helper or SSH agent instead.

Registry

New Contributors

Full Changelog: jdx/mise@v2026.10.8...v2026.10.9

💚 Sponsor mise

mise is built and maintained by @​jdx, an open source developer at entire.io, the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an individual or company sponsor. Your support funds ongoing development and helps keep mise fast, free, and independent.

v2026.10.8: : Stable global install link for IDEs

Compare Source

Each tool's install directory now has a global link that follows your global config, which gives IDEs a path that doesn't change when you switch versions. This release also retries downloads whose response body drops partway through, fixes lockfile checks for release tags that contain @, and stops dotfiles history from rewriting files that haven't changed.

Added

  • global runtime symlink. Each tool's install directory now has a global link to the version your global and system config select. Programs that can't run mise, such as IDEs, can point at this path and follow mise use -g changes. #​14271

    ~/.local/share/mise/installs/maven/
├── 3.9.13/
├── 3.9.16/
└── global -> ./3.9.16

    The link is updated along with the other runtime symlinks (latest, 3, ...), for example after mise use -g, mise install and mise upgrade. Project config and MISE_*_VERSION don't change it. If no global config selects the tool, mise removes the link. A real directory named global is left alone. The link is always on, and no setting turns it off.

Fixed
  • HTTP requests now retry, up to http_retries, when the response body drops partway through. Before, only the request and headers were retried, so a version list or release page cut off mid-transfer failed with error decoding response body. This applies to text, JSON and byte requests, and to version lists read with version_regex. #​14253 (@​JamBalaya56562)
  • mise install no longer rejects lockfile entries whose release tag contains @, such as cli@0.46.0. mise lock writes these tags percent-encoded (cli%400.46.0), and the locked-URL check read that as version 400.46.0. Re-running mise lock couldn't fix it. #​14252
  • Dotfiles history index rebuilds now skip checkpoint metadata files whose contents haven't changed. On large histories, rebuilds used to rewrite every file, which caused minutes of disk writes and made mise dot save fail with another history operation is running. #​14249
  • The JSON schema now accepts outputs = { auto = false } on tasks, so editors and linters such as tombi and Taplo no longer flag it. mise's behavior is unchanged: auto = false means the same as leaving outputs unset. #​14265 (@​JamBalaya56562)
Documentation
  • The dotfiles docs now open with a recommended setup, and the modes-and-keys reference table has been reorganized into three readable columns. #​14267
Registry

Full Changelog: jdx/mise@v2026.10.7...v2026.10.8

💚 Sponsor mise

mise is built and maintained by @​jdx, an open source developer at entire.io, the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an individual or company sponsor. Your support funds ongoing development and helps keep mise fast, free, and independent.

v2026.10.7: : Background tool updates at the shell prompt, a verified download cache, and mise upgrade --global

Compare Source

Tools with auto_update now update in the background from an activated shell, and a new tool_update.global_auto setting turns this on for every global tool. mise also keeps finished downloads in a content-addressed cache and checks them again before reusing them. This release also fixes .env parsing regressions from 2026.10.3 and a crash in mise run.

Added

  • Automatic updates at the shell prompt. Before, auto_update only ran when a shim or mise exec launched a tool. With mise activate, tools run straight from PATH, so they were never updated. Now, when a check is due, mise hook-env starts the update in a detached background process. The prompt doesn't wait and nothing is printed. The next command after the update finishes uses the new version. The existing rules still apply: only global config counts, exact versions don't move, nothing updates offline, in CI or with locked, and minimum_release_age is honored. While the tool-update service is running, prompts leave updates to it. Failed background updates show up in mise doctor. #​14239

  • tool_update.global_auto turns on automatic updates for every tool in global config at once. It takes the same values as auto_update: true checks every tool_update.check_duration (24h by default), and a duration sets the interval. A tool's own auto_update takes precedence, so auto_update = false opts a tool out. Projects can't enable this setting. You can also set it with MISE_TOOL_UPDATE_GLOBAL_AUTO. self_update.auto now accepts an interval too, for example self_update.auto = "1d". #​14237

    # ~/.config/mise/config.toml
[settings]
tool_update.global_auto = "12h"

[tools]
claude = "latest"                                   # checked every 12h
node = { version = "24", auto_update = "6h" }       # its own interval wins
python = { version = "3.13", auto_update = false }  # opted out

  • mise upgrade --global and mise outdated --global act only on the tool requests in global and system config, even inside a project that pins its own version or when MISE_<TOOL>_VERSION is set. The project's mise.toml, lockfile and [env] are not read or changed. --bump writes to the global config. --global can't be combined with --local or --inactive. A new "Self-updating tools" docs page explains how tools that update themselves, such as coding agents, can detect a mise install and update through mise instead of overwriting their own install. #​14243

    mise outdated --global claude --json
mise upgrade --global claude

  • Verified download cache. Finished downloads are stored once in $MISE_CACHE_DIR/downloads-cas and hashed again before every reuse. A cached file that no longer matches is dropped and downloaded again. #​14222, #​14242

    • When the server sent an ETag or Last-Modified header, the next request for the same URL is conditional. On 304 Not Modified, mise reuses the cached file without downloading it again. This applies to every download through mise's HTTP client.
    • For tools with a pinned checksum (from tool options, mise.lock or a packslip digest), http, github, aqua, packslip and the precompiled core tools (Node, Go, Bun, Deno, Zig, Java, Python, Ruby, Erlang, Elixir, Swift) reuse the cached file without any network request. The file is hard-linked into place, so it doesn't use extra disk space.
    • With --locked or paranoid, mise only uses the cache for downloads with a pinned checksum. This means a CI cache you restore can save downloads but can't change what gets installed. The CI guide now shows how to cache ~/.cache/mise/downloads-cas instead of installed tools.
    • download_cache_max_size sets the size limit (default 2GiB, 0 for no limit). When the cache is full, the least recently used files are removed. download_cache = false (MISE_DOWNLOAD_CACHE=0) turns the cache off.

  • npm: packages that install no executables now trigger a warning. For example, mise use npm:lodash used to succeed silently even though it created no shims. The install still succeeds. #​14246

Fixed
  • .env parsing regressions from 2026.10.3, affecting [env] _.file and the env_file setting:
    • Backslashes in single-quoted values are literal again, so Windows paths like '\\fileserver\share' and 'C:\temp\' load correctly. To embed a single quote, use double quotes. #​14228
    • Quoted and unquoted parts placed next to each other are joined again, as in shell. For example, A='it'\''s' gives it's and B=a'b c'd gives ab cd. These lines used to cause syntax errors that dropped the rest of the file. Quotes inside an unquoted value are now removed, so JSON that needs to keep its quotes must be single-quoted (CONFIG='{"debug": true}'). A quote with no matching closing quote on the same line stays literal, so NAME=O'Brien reads as written. #​14231
  • mise run no longer crashes now and then with called Option::unwrap() on a None value when it reads the tool list while it's being reloaded after an install. #​14240
  • On Windows with core.autocrlf=true, mise bootstrap repos status no longer reports freshly cloned repos as dirty. #​14225
  • On Windows, mise dot apply can now repoint a mode = "symlink" dotfile whose target is a directory junction after its source changes. It used to fail with os error 5. #​14226
  • history.describe_command now works for files tracked through a variant (such as home@work/...), including files added or removed inside variant directories. Encrypted files are still left out of the diff. #​14194 (@​oppegard)
  • mise doctor now shows the dotfiles: section, including the history repo: and origin:, when history.enabled = false. mise doctor --json adds dotfiles.history_enabled and dotfiles.tracking_error. #​14244
  • mise lock now applies aqua registry version prefixes (such as Codex's rust- prefix) before it chooses version overrides. Before, platform entries like windows-x64 were skipped. When several prefix families match, mise now warns and skips the entry instead of picking one arbitrarily. #​14218 (@​nettlesh)
  • The rustup profile aliases m, d, c and the empty value are now treated like minimal, default and complete. With profile = "d", mise install now restores missing components like clippy and rustfmt. Unknown profile names now fail with rustup's list of valid names. #​14220 (@​JamBalaya56562)
  • The cargo backend now takes the same rust-state lock as the rust plugin when CARGO_HOME/RUSTUP_HOME are set through the rust.cargo_home/rust.rustup_home settings or MISE_CARGO_HOME/MISE_RUSTUP_HOME in [env]. Before, parallel source-build installs could race and fail. #​14219 (@​wislertt)
  • The hint to enable self_update.auto now appears on every mise version and mise self-update run, not just the first time. It stops once you enable auto-update or run mise settings add disable_hints auto_update. #​14233
  • The JSON schema now matches what mise accepts, so editors and linters like tombi and Taplo report the right errors (@​JamBalaya56562):
    • Task arrays can contain { task = ... } and { tasks = [...] } entries. #​14229
    • depends, depends_post and wait_for accept a single table, and empty nested lists like depends = [[]] are rejected. #​14236
    • [env] entries that combine value with required = true or a help string, and { required = false } with no value, are rejected. #​14247
Deprecated
  • always_keep_download is deprecated because downloads are now kept in the download cache. It will warn starting in 2026.11.0 and will be removed in 2027.11.0. #​14222
Documentation
  • The automatic tool updates docs now explain that minimum_release_age (24h by default) plus the check interval can delay an update by 24 to 48 hours after a release. You can set minimum_release_age per tool. Docs and hints now use the shorter mise settings KEY=VALUE form. #​14235
New Contributors

Full Changelog: jdx/mise@v2026.10.6...v2026.10.7

💚 Sponsor mise

mise is built and maintained by @​jdx, an open source developer at entire.io, the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an individual or company sponsor. Your support funds ongoing development and helps keep mise fast, free, and independent.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 10, 2026 02:50
@renovate
renovate Bot force-pushed the renovate/support-deps branch from 3618797 to 34d250a Compare October 10, 2026 10:42
@renovate renovate Bot changed the title chore(deps): update support dependencies to v2026.10.7 chore(deps): update support-deps Oct 10, 2026
@renovate
renovate Bot force-pushed the renovate/support-deps branch 4 times, most recently from 62c9578 to d4d9d7a Compare October 13, 2026 15:24
@renovate
chore(deps): update support-deps
b14dd92 
| datasource                 | package                   | from       | to         |
| -------------------------- | ------------------------- | ---------- | ---------- |
| github-tags                | actions/download-artifact | v8.0.1     | v8.0.2     |
| github-tags                | actions/upload-artifact   | v7.0.1     | v7.0.2     |
| github-tags                | github/codeql-action      | v4.38.2    | v4.38.3    |
| github-releases            | goreleaser/goreleaser     | v2.18.2    | v2.18.3    |
| github-release-attachments | jdx/mise                  | v2026.10.6 | v2026.10.9 |
@renovate
renovate Bot force-pushed the renovate/support-deps branch from d4d9d7a to b14dd92 Compare October 13, 2026 16:31
@eoghanriley
eoghanriley merged commit 340607a into main Oct 13, 2026
55 of 56 checks passed
@eoghanriley
eoghanriley deleted the renovate/support-deps branch October 13, 2026 18:59
@github-actions github-actions Bot mentioned this pull request Oct 13, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@eoghanriley eoghanriley eoghanriley approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@eoghanriley