[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aqua:defenseunicorns/uds-cli	tools	minor	0.38.0 → 0.39.0
jdx/mise-action	action	minor	v5.0.1 → v5.1.0	v5.1.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

defenseunicorns/uds-cli (aqua:defenseunicorns/uds-cli)

v0.39.0

Compare Source

⚠ BREAKING CHANGES

• deps: Zarf v0.87 breaking changes. See: https://github.com/zarf-dev/zarf/releases/tag/v0.87.0 (#​1585) (ee139b9)

Features

• bundle: add resume support to deploy (#​1559) (d13efe4)
• next: override config vars via cli (#​1564) (968a153)

Bug Fixes

• next: improve local artifact inspection performance (#​1579) (8af3b5e)
• revert release 0.39.0 (#​1589) (79c2c58)

Miscellaneous

• ci: validate Renovate configuration (#​1587) (ded5010)
• deps: update application-deps (#​1568) (7b85112)
• deps: update application-deps to v0.37.1 (#​1582) (05a627e)
• deps: update support dependencies to v2026.9.12 (#​1572) (11e098a)
• deps: update support dependencies to v4.38.1 (#​1571) (cbc46e1)
• deps: update support-deps (#​1567) (a0ed934)
• deps: update support-deps (#​1578) (d2f27f0)
• deps: update support-deps (#​1581) (a982a99)
• deps: update support-deps (#​1583) (469e28e)
• deps: update support-deps (#​1584) (1a98aa9)
• deps: update zarf to v0.87.0 (#​1585) (ee139b9)
• main: release 0.39.0 (#​1570) (7df22a8)
• next: standardize using zarf helpers for parsing (#​1577) (2de35de)
• update uds-k3d to 0.21.2 (#​1591) (053d9c9)

jdx/mise-action (jdx/mise-action)

v5.1.0: : Tool version outputs, plugins input, and cached mise reuse

Compare Source

mise-action now reports the tool versions it installed as step outputs, can install mise plugins before tools, and can save the cache at the end of the job. Several caching fixes stop the action from downloading mise again on every run.

Added

• Tool versions as step outputs. After install, the action runs mise ls --json --current and sets a versions output. This is a JSON object of the active, installed tools. Each tool maps to a list of {version, requested_version, install_path, source} entries. Each tool also gets its own output with its resolved version, such as steps.mise.outputs.node. A tool only gets its own output if its name is a valid output name and isn't cache-hit or versions. Names like npm:@scope/pkg appear only in versions. If the action can't read the versions, it prints a warning and the step still succeeds. (#​655 by @​jdx)

  - uses: jdx/mise-action@v5
    id: mise
  - run: echo "node ${{ steps.mise.outputs.node }}"

• plugins input. List plugins one per line as name or name url. Blank lines and # comments are ignored. The action runs mise plugins install -y for each one before mise install. Plugins that are already installed, for example restored from the cache, are left as they are. An unknown plugin fails the step. When plugins is set, its hash is added to the default cache key. Custom cache_key templates can use it as {{plugins_hash}}. If plugins is unset, existing cache keys don't change. (#​656 by @​jdx)

  - uses: jdx/mise-action@v5
    env:
      # needed for idiomatic files such as .yvmrc
      MISE_IDIOMATIC_VERSION_FILE_ENABLE_TOOLS: yarn
    with:
      plugins: |
        yarn
        php https://github.com/verzly/mise-php#latest

• cache_save_post input (opt-in, default false). When enabled, the mise cache is saved in the action's post step instead of right after install. This way, tools installed by later steps are included in the cache, for example from monorepo sub-project configs or task-level tools. The setting only applies on a cache miss, because an existing cache entry can't be overwritten. The post step runs even if a later step fails. If the post-step save fails, the action prints a warning and the job doesn't fail. (#​649 by @​jdx)
• auto_update input (default false). See Changed below. (#​642 by @​jdx)
• The action now warns when you use the mise_toml input and a .mise.toml already exists in the working directory. mise loads .mise.toml before the mise.toml the action writes, so the input may have no effect. (#​654 by @​jdx)

Changed

• A cached mise is kept when version is unset. Before, each new mise release made the action reject the cached binary in integrity verification and download mise again on every run until the cache key changed. Now the cached binary is kept until the cache key changes. The action verifies it against the signed checksums of the version recorded at install, without running it first. Caches saved before this release have no version record, so they are still verified against the latest release, and a tampered binary is still replaced. The integrity warning now includes the underlying error. To keep updating to newer releases as before, set auto_update: true. Each updated binary is cached under its own mise version, so each release is downloaded only once. An explicit version input works the same as before. (#​642 by @​jdx)

Fixed

• The cache is saved after a partial-match restore. When the cache was restored from a key that only matched the prefix, the action never saved under the primary key, so it rebuilt the same tools on every run. Exact cache hits still skip the save. (#​646 by @​jdx)
• Caches saved before this release no longer cause a download on every run. These caches have no version record, so a cached binary is verified against the latest release. Once a newer mise shipped, the action downloaded mise again on every run. It now also saves the reinstalled binary in a cache keyed by mise version, so later runs restore that binary instead of downloading it. (#​648 by @​jdx)
• Windows: mise installs without unzip. The mise zip is now extracted with PowerShell's Expand-Archive. Self-hosted Windows runners that don't have unzip, such as fresh Windows 11 arm64 machines, can now install mise. (#​650 by @​jdx)

Documentation

• New README guides cover matrix builds, using another cache action, and Rust caching:
  • Matrix builds: use MISE_<TOOL>_VERSION overrides and give each matrix entry its own cache_key.
  • Other cache actions: set cache: false and cache mise's data directory yourself.
  • Rust: explains why a restored cache can be missing Rust components such as rustfmt, with two workarounds. (#​654, #​651 by @​jdx)

Full Changelog: jdx/mise-action@v5.0.1...v5.1.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.