Repository navigation
chore(deps): update support-deps - #1584
Merged
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/support-deps
branch
9 times, most recently
from
October 5, 2026 17:29
f8153d4 to
5af2649
Compare
| datasource | package | from | to | | -------------------------- | ----------------------------------------- | ---------- | ---------- | | github-tags | anchore/sbom-action | v0.24.2 | v0.24.3 | | github-tags | defenseunicorns/uds-core | 1.13.1 | 1.14.0 | | docker | ghcr.io/defenseunicorns/packages/uds-k3d | 0.21.0 | 0.21.1 | | docker | ghcr.io/defenseunicorns/packages/uds/core | 1.13.1 | 1.14.0 | | github-releases | jdx/hk | 2.3.0 | 2.4.0 | | github-release-attachments | jdx/mise | v2026.9.17 | v2026.10.3 | | github-tags | jdx/mise-action | v4.3.0 | v5.0.1 |
renovate
Bot
force-pushed
the
renovate/support-deps
branch
from
October 5, 2026 18:32
5af2649 to
335dbe1
Compare
eoghanriley
approved these changes
Oct 5, 2026
This was referenced Oct 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.24.2→v0.24.31.13.1→1.14.00.21.0→0.21.10.21.0-airgap→0.21.1-airgap1.13.1-upstream→1.14.0-upstream2.3.0→2.4.02.5.02026.9.17→2026.10.3v4.3.0→v5.0.1v5.1.1(+1)Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
anchore/sbom-action (anchore/sbom-action)
v0.24.3Compare Source
Added Features
Bug Fixes
(Full Changelog)
defenseunicorns/uds-core (defenseunicorns/uds-core)
v1.14.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
Miscellaneous
Documentation
jdx/hk (hk)
v2.4.0Compare Source
🚀 Features
🐛 Bug Fixes
📚 Documentation
⚡ Performance
🧪 Testing
🛡️ Security
🔍 Other Changes
📦️ Dependency Updates
v2.3.1Compare Source
🚀 Features
🐛 Bug Fixes
📚 Documentation
⚡ Performance
🧪 Testing
🔍 Other Changes
📦️ Dependency Updates
jdx/mise (jdx/mise)
v2026.10.3: : Dotfile groups, templated Compose projects, and secret hygiene for shell stateCompare Source
This release adds dotfile groups for Stow-style dotfiles repositories, templated
[bootstrap.compose]values, and custom labels for task confirm prompts. Secret values no longer get copied into__MISE_DIFF/__MISE_SESSIONor written to the env cache. It also fixes dotenv${VAR}expansion,mise x tool@latestreporting other tools as missing, and Ruby source builds ignoringdependstools.Added
Dotfile groups. You can now declare a directory tree as a group with
[dotfile_groups.<name>], using one directory per app or machine role like GNU Stow. mise walks the group'srootand deploys each file to the same path undertarget(default~), so you don't have to list files one by one. A machine picks which groups to apply with[bootstrap] dotfile_groups. If that list isn't set, every group applies. #13945mode(symlink-eachby default, orcopyorsymlink),exclude,dot_prefix,manifestandrelative. A[dotfile_groups.<name>.entries]table uses the same syntax as[dotfiles]and removes those paths from the walk, so you can link a directory whole, render a template, or mark a fileabsent.applyandstatusfail before anything is written, and the error names both groups.$MISE_STATE_DIR/dotfiles/groups/.mise dot statusshows files that no active entry deploys any more asorphaned.mise dot apply --pruneremoves them after asking you, andmise dot unapply --group <name>removes one group's files even after the group is gone from config. mise only removes links that still point at their source and copies that still match what it wrote, unless you pass--force.mise dot addandmise dot editput files under a group's target into that group's root, and both accept--groupwhen more than one group could match.mise oci builddoes not include group trees.Templates in
[bootstrap.compose]. Every string field in a Compose project, includingproject_dir,files,env_files,commandanddepends_on, is now rendered as a Tera template in the context of the config that declares it. Shared configs can use{{ config_root }},{{ vars.* }}or{{ env.* }}instead of hardcoded absolute paths.exec()isn't allowed in these templates. #13938Custom labels for task
confirmprompts. The object form ofconfirmnow acceptsyesandnolabels, which support the same templates asmessage.defaultis now optional and still defaults toyes. Piped answers still takey/n, and--yesstill skips the prompt. #13944Fixed
${VAR}expansion checks the file's own values first. Before,${VAR}in a dotenv file read the process environment first. Withmise activateexporting another.env, a reference could expand against the shell instead of an earlier line in the same file. Now the file's own earlier assignments come first, then values already loaded (withexpand = true) or the process environment. The${VAR:-default},${VAR:+alt}and${VAR:?message}forms now work too. When theenv_filesetting hits a syntax error, mise keeps the assignments it read before the error and shows one warning for the file. #13946mise x tool@latestno longer reports other tools as missing. Passing any@latestargument used to resolve every configured tool against its newest release and ignore the lockfile, so tools that were installed and locked showed up asmissing. Now only the tools named on the command line resolve to latest. #13943dependstools. ruby-build now gets the declared dependencies onPATH. For example, JRuby builds use a mise-managedjavainstead of the system JDK. PATH stays the same when no dependencies are declared. #13942 by @seurosSecurity
__MISE_DIFFand__MISE_SESSIONare passed to every child process. They now store ablake3:digest of each value mise sets instead of the value itself. The previous (old) values are still stored in plain text because mise needs them to restore the environment. These are plain hashes, not keyed ones, so a low-entropy value could be brute-forced from its digest.agevalues (also when used through[vars]), sops-encrypted_.fileentries, any directive withredact = true, and env modules that returncacheable = false. Before, a non-tool module'scacheable = falsewas ignored.redact: aredactsetting on an env module, such as_.my-plugin = { redact = false }, now overrides the plugin's own preference. Before, it was ignored. A non-boolean value is now a config error.mise x -- fish: env values no longer go in fish's command-line arguments, wherepscould read them.--deny-envnow applies there too.Registry
jactionlint(github:jdx/jactionlint), a maintained fork of actionlint with upstream fixes and new checks.actionlintis now deprecated, with a message pointing tojactionlint. Existingactionlintinstalls keep working. #13960Documentation
Full Changelog: jdx/mise@vfox-v2026.10.2...v2026.10.3
💚 Sponsor mise
mise is built and maintained by @jdx, an open source developer at entire.io, the title sponsor of his open source work.
If mise saves you or your team time, please consider becoming an individual or company sponsor. Your support funds ongoing development and helps keep mise fast, free, and independent.
v2026.10.2: : Experimental spinel backend, typed tool options in the schema, and daemon presets on WindowsCompare Source
This release adds an experimental
spinel:backend for compiling Ruby CLIs to native binaries. Themise.tomlschema now checks each backend's own tool options, and daemon presets work on Windows. It also includes fixes for shell activation with untrusted configs, task timeouts and Windows quoting.Added
Experimental
spinel:backend. It builds a Ruby command-line tool from a GitHub repository into a native executable using Spinel, Matz's Ruby AOT compiler. Versions come from git tags throughgit ls-remote, so listing them doesn't call the GitHub API. Available options:entrypoint,bin,tag_prefix,source_refandspinel. You need thespinelcompiler onPATH(mise doesn't install it yet) andmise settings experimental=true. It works on macOS and Linux only, and it may be removed later if it becomes a maintenance burden. Based on nateberkopec/mise-backend-spinel. #13922Typed tool options in the JSON schema. Editors that use
schema/mise.jsonnow validate and autocomplete options for each backend, based on the tool's prefix. This covers github, gitlab, forgejo, ubi, http, s3, aqua, cargo, npm, pypi/pipx, gem, go, conda, spm, packslip and spinel. It also covers core-tool options forpython,java,rustanddotnet, per-platform overrides (platforms.<os>-<arch>) and[tasks.*.tools]tables. For example, a numericasset_patternorjavarelease_type = "stable"is now flagged. Boolean options accepttrue/false,"true"/"false"and1/0, the same values mise accepts.lazy_binsaccepts a single string. The deprecatedexperimental_monorepo_rootkey is allowed again. Runtime behavior is unchanged, but your editor may now flag mistakes in existing configs. #13924Daemon presets on Windows.
mise daemons startno longer refuses preset daemons on Windows. Every preset exceptredis, which has no Windows build, now runs under pitchfork's defaultcmd /Cshell. For PostgreSQL to stop cleanly, you need pitchfork 2.29.0 or later. PostgreSQL also won't start from an elevated prompt. Windows reserves some port ranges for Hyper-V and WSL, so a preset's default port can be blocked. If it is, set a different one withports. #13929 by @JamBalaya56562Install mise with packslip. The installation guide now covers installing mise's signed release without running an install script. packslip verifies the Sigstore signature and the archive digest.
mise self-updateworks with this install method. #13710Fixed
Config and activation
mise hook-envfailed completely, so tools and env from your trusted global config were not applied either. Now it skips the untrusted file, prints the usual one-time warning and loads everything else. Explicit commands such asmise runandmise xstill error on untrusted configs. #13919mise install,mise use,mise upgradeandmise ls-remote --prereleasereload settings partway through. Before, a failed reload aborted mise with SIGABRT and a core dump. Now mise printsfailed to reload settingswith the cause and keeps using the previous settings. #13925--no-configandMISE_NO_CONFIG=1now skip.miserc.tomldiscovery. Before, a malformed project, global or system miserc broke commands likemise --no-config version. #13926 by @donbeaveTasks
timeoutwas reported as successful. Nowmise runreportstimed outand exits non-zero. #13930 by @Marukome0743timeout, mise now sends it Ctrl+C and gives it 5 seconds before ending its process tree, the way Unix uses SIGTERM followed by SIGKILL. For example, PowerShellfinallyblocks now run. Only the timed-out task gets the Ctrl+C. The whole-runmise run --timeoutstill stops tasks immediately on Windows. #13889 by @JamBalaya56562Windows
mise exec -- cmd /ckeeps double quotes. Before,mise exec -- cmd /c 'echo "a b"'printed\"a b\". Pitchfork daemons withmise = truewhoseruncontained a quote, such as a quoted program path with a space, also failed to start. mise now passes a single quoted command after/cor/kto cmd unchanged. #13887 by @JamBalaya56562initsteps start undercmd.exe. Before, they failed with'exec' is not recognized. On Windows, mise now builds the command with cmd quoting and escaping. Writeinitsteps as cmd commands. #13928 by @JamBalaya56562Other
mise packslip forget, the tool'smise.lockentries, or both. Existing pins and lockfile entries still load. #13710mise dot saveand history sync work after a tracked directory is replaced by a symlink. Before, they failed while reading older checkpoints. #13931Registry
helmfile(1.8.1 and later) anddagu(2.18.0 and later) now install from signed packslip manifests. Older versions still install throughaqua:. To list them, runmise ls-remote aqua:helmfile/helmfileormise ls-remote aqua:dagucloud/dagu. #13933goccy/tobari,ymmt2005/pbschema-lens.Full Changelog: jdx/mise@v2026.10.1...v2026.10.2
💚 Sponsor mise
mise is built and maintained by @jdx, an open source developer at entire.io, the title sponsor of his open source work.
If mise saves you or your team time, please consider becoming an individual or company sponsor. Your support funds ongoing development and helps keep mise fast, free, and independent.
v2026.10.1: : Task timeout and Ctrl-C fixes, Windows daemon and shim fixesCompare Source
This release is mostly bug fixes.
mise runnow stops tasks properly when--timeoutexpires or you press Ctrl-C. Task daemons and native shims work better on Windows.core:rustnow followsmise.lockand picks up new stable and beta toolchains. Lockfile, GitHub asset selection, Homebrew cask and plugin update problems are also fixed.Fixed
Tasks
mise run --timeoutnow stops the tasks it was running. Before, mise printed the timeout error and exited, but the task processes could keep running in the background. Now the whole-run timeout (--timeoutor thetask.timeoutsetting) stops tasks the same way a per-tasktimeoutdoes. On Unix, mise sends SIGTERM and then SIGKILL after 5 seconds. On Windows, it runstaskkill /F /T. Tasks withraw = trueare not stopped by the whole-run timeout. #13876 by @Marukome0743mise runitself got SIGINT twice; a tool likedocker compose uptreated the duplicate SIGINT as a force-quit; and a task that exits non-zero on SIGINT caused mise to send SIGTERM to its sibling tasks. Now mise waits for tasks to finish and then exits with status 130. A second Ctrl-C still force-quits. #13904:taskshorthand. In a monorepo,mise run :<TAB>now suggests tasks from the current config root, and task flags complete after theConfiguration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.