Update GitHub actions (major)#276
Conversation
|
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
7c87231 to
c2e56be
Compare
renovate
Bot
changed the title
|
Summary
This PR updates two GitHub Actions to major versions in
Both actions are updated in two workflow jobs (build and deploy jobs). Changes include both version tags and verified commit SHAs. Why it matters: checkout v6 requires GitHub runner v2.327.1 or newer. mise-action v4.0.1 is a maintenance release with no functional changes. What reviewers should knowWhat to verify:
Note: The author's description mentions gh-action_release v7, but it doesn't appear in the actual changes — only checkout and mise-action were updated in this PR.
|
![sonar-review-alpha[bot]](https://avatars.githubusercontent.com/in/3025063?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
c2e56be to
3869a00
Compare
|
There was a problem hiding this comment.
LGTM! ✅
Clean version bump — no logic changes, just updated SHA pins and version comments. Both actions are updated consistently across both jobs. The author's description mentions a third action (SonarSource/gh-action_release v6→v7) but it is not present in the actual diff; the release workflow likely lives in a separate file not touched here.
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
3869a00 to
91a3aa4
Compare
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
91a3aa4 to
3fed820
Compare
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
3fed820 to
8c8aee1
Compare
|
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
8c8aee1 to
dcc8368
Compare
renovate
Bot
force-pushed
the
renovate/major-github-actions
branch
from
dcc8368 to
6cbdb93
Compare
|
|
1 participant
This PR contains the following updates:
v6.0.3→v7v7.0.0v4.3.0→v7v7.0.0v2.4.4→v4.2.0Release Notes
actions/checkout (actions/checkout)
v7.0.0Compare Source
v7Compare Source
jdx/mise-action (jdx/mise-action)
v4.2.0: : Bootstrap mode & wget fallbackCompare Source
This release adds an opt-in bootstrap mode for projects that use
mise bootstrap, and makes the action work on runner images that shipwgetbut notcurl.Added
Bootstrap mode (#522) by @jdx
Three new inputs let the action drive
mise bootstrapinstead ofmise install:bootstrap: true, the action runsmise bootstrapunder the existinginstallgate and setsMISE_EXPERIMENTAL=1automatically.mise --locked bootstrap, matching the auto-lock behavior introduced formise installin v4.1.0.install_argscannot be combined withbootstrap: true— the action fails fast and tells you to usebootstrap_skip/bootstrap_argsinstead, because full bootstrap doesn't support partial tool install args.{{bootstrap_hash}}template variable is included in the default cache key (and available in customcache_keytemplates) so bootstrap and non-bootstrap configurations don't share caches.bootstrap_skiprelies onmise bootstrap --skipfrom jdx/mise#10497, so make sure you're on a recent mise version if you use it.Fixed
wgetwhencurlis unavailable (#521) by @risu729 — The action used to hard-codecurlfor fetching the mise binary, tar/zip archives, and the latestVERSIONlookup, which broke on minimal runner images that only shipwget. It now preferscurland transparently falls back towget, preserving the streamingdownload | tarfast path for.tar.gzand.tar.zstinstalls on Linux/macOS. Proxy support is unchanged — both tools honorHTTP_PROXY/HTTPS_PROXY. Addresses jdx/mise#10488.Documentation
Full Changelog: jdx/mise-action@v4.1.0...v4.2.0
v4.1.0: : automatic --locked installsCompare Source
This release adds automatic locked installs when a
mise.lockis present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.Added
Automatic
--lockedinstall whenmise.lockexists (#495) by @zeitlingerWhen a repo contains
mise.lock, the action now automatically passes--lockedtomise install(on mise versions that support it). This removes the need to manually setinstall_args: --lockedand preventsmise installfrom silently mutating the lockfile in CI. Explicitinstall_argsand older mise versions are still respected.Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating
mise.lockmid-run — this surfaces lockfile drift rather than hiding it.Fixed
macos15,ubuntu24for GitHub-hosted runners;self-hostedotherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's~/.local/share/mise/installs/*, causing failures likedoes not have an executable named '…'or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.mise-shim.exemissing on Windows (#476) by @risu729 — the action now installsmise-shim.exealongsidemise.exeand repairs restored caches that lack the shim. Fixes #475.Changed
Full Changelog: jdx/mise-action@v4.0.1...v4.1.0
v4.0.1: : Documentation and Internal CleanupCompare Source
A small maintenance release that updates the README documentation to reflect v4 and cleans up internal code. There are no functional changes to the action itself.
Changed
jdx/mise-action@v4,actions/checkout@v6, and current tool versions by @deining in #407 and #408getCwd()helper to deduplicate working directory resolution logic (internal refactor, no behavior change) by @altendky in #403New Contributors
Full Changelog: jdx/mise-action@v4.0.0...v4.0.1
v4.0.0: : Node.js 24 RuntimeCompare Source
A major version bump that updates the action's runtime from Node.js 20 to Node.js 24. GitHub has deprecated Node.js 20 for Actions and will force Node.js 24 as the default starting June 2, 2026. This release proactively adopts the new runtime to eliminate deprecation warnings and ensure continued compatibility.
Breaking Changes
The action now runs on the Node.js 24 runtime instead of Node.js 20. If your workflow pins
jdx/mise-action@v3, you will continue to see deprecation warnings. Update tojdx/mise-action@v4to resolve them:This should be a seamless upgrade for the vast majority of users — no configuration changes are needed beyond updating the version reference.
Changed
New Contributors
Full Changelog: jdx/mise-action@v3...v4.0.0
v4Compare Source
v3.6.3Compare Source
What's Changed
New Contributors
Full Changelog: jdx/mise-action@v3.6.2...v3.6.3
v3.6.2Compare Source
What's Changed
439137eby @renovate[bot] in #3707a166d7by @renovate[bot] in #375de0fac2by @renovate[bot] in #374b5ebac6by @renovate[bot] in #378f5c2471by @renovate[bot] in #3804558047by @renovate[bot] in #387New Contributors
Full Changelog: jdx/mise-action@v3.6.1...v3.6.2
v3.6.1Compare Source
What's Changed
Full Changelog: jdx/mise-action@v3.6.0...v3.6.1
v3.6.0Compare Source
What's Changed
497990dby @renovate[bot] in #32445c3735by @renovate[bot] in #346mise_tomlinput by @quad in #3516044e13by @renovate[bot] in #3614bdb89fby @renovate[bot] in #362New Contributors
Full Changelog: jdx/mise-action@v3.5.1...v3.6.0
v3.5.1Compare Source
What's Changed
Full Changelog: jdx/mise-action@v3.5.0...v3.5.1
v3.5.0Compare Source
What's Changed
f94c9beby @renovate[bot] in #319New Contributors
Full Changelog: jdx/mise-action@v3.4.1...v3.5.0
v3.4.1Compare Source
What's Changed
New Contributors
Full Changelog: jdx/mise-action@v3.4.0...v3.4.1
v3.4.0Compare Source
What's Changed
a8d1ac4by @renovate[bot] in #293755f449by @renovate[bot] in #2964221315by @renovate[bot] in #2995d5cd55by @renovate[bot] in #302awaittocore.groupcalls by @smorimoto in #305New Contributors
Full Changelog: jdx/mise-action@v3.3.1...v3.4.0
v3.3.1Compare Source
What's Changed
Full Changelog: jdx/mise-action@v3.3.0...v3.3.1
v3.3.0Compare Source
What's Changed
d3678e2by @renovate[bot] in #25908eba0bby @renovate[bot] in #258192325cby @renovate[bot] in #269303c0aeby @renovate[bot] in #274,inMISE_ENVwith-by @risu729 in #27864d10c1by @renovate[bot] in #279New Contributors
Full Changelog: jdx/mise-action@v3.2.0...v3.3.0
v3.2.0Compare Source
What's Changed
e32d7e6by @renovate[bot] in #24908eba0bby @renovate[bot] in #248Full Changelog: jdx/mise-action@v3.1.0...v3.2.0
v3.1.0Compare Source
What's Changed
New Contributors
Full Changelog: jdx/mise-action@v3.0.2...v3.1.0
v3.0.2Compare Source
What's Changed
Full Changelog: jdx/mise-action@v3.0.1...v3.0.2
v3.0.1Compare Source
What's Changed
Full Changelog: jdx/mise-action@v3.0.0...v3.0.1
v3.0.0Compare Source
What's Changed
c37c932by @renovate[bot] in #23451f7732by @renovate[bot] in #233New Contributors
Full Changelog: jdx/mise-action@v2...v3.0.0
v3Compare Source
🚀 Features
🐛 Bug Fixes
awaittocore.groupcalls (#305) by @smorimoto in #305📚 Documentation
⚙️ Miscellaneous Tasks
New Contributors
Configuration
📅 Schedule: (in timezone Europe/Paris)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.