chore(deps): Bump jdx/mise-action from 4.0.1 to 4.1.0 by dependabot[bot] · Pull Request #315 · EvilBit-Labs/libmagic-rs

dependabot · 2026-06-08T03:34:39Z

Bumps jdx/mise-action from 4.0.1 to 4.1.0.

Release notes

Sourced from jdx/mise-action's releases.

v4.1.0: automatic --locked installs

This release adds automatic locked installs when a mise.lock is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.

Added

Automatic --locked install when mise.lock exists (#495) by @zeitlinger

When a repo contains mise.lock, the action now automatically passes --locked to mise install (on mise versions that support it). This removes the need to manually set install_args: --locked and prevents mise install from silently mutating the lockfile in CI. Explicit install_args and older mise versions are still respected.

Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating mise.lock mid-run — this surfaces lockfile drift rather than hiding it.

Fixed

Cache key collisions across runner providers (#456) — the default cache key now includes the runner image (e.g. macos15, ubuntu24 for GitHub-hosted runners; self-hosted otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's ~/.local/share/mise/installs/*, causing failures like does not have an executable named '…' or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.

mise-shim.exe missing on Windows (#476) by @risu729 — the action now installs mise-shim.exe alongside mise.exe and repairs restored caches that lack the shim. Fixes #475.

Changed

Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (#436). No user-facing behavior change.

Full Changelog: jdx/mise-action@v4.0.1...v4.1.0

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

4.1.0 - 2026-06-04

🚀 Features

add wings_enabled input (mise-wings cache integration) (#454) by @jdx in #454

lock install when mise.lock is present (#495) by @zeitlinger in #495

🐛 Bug Fixes

(ci) add gh auth setup-git to release-plz.sh (#473) by @jdx in #473

(ci) pin codeql-action with exact version comment (#481) by @jdx in #481

include runner image in cache key to prevent cross-provider collisions (#456) by @jdx in #456

install mise-shim.exe on Windows (#476) by @risu729 in #476

⚙️ Miscellaneous Tasks

(ci) use !cancelled() instead of always() for final job (#460) by @jdx in #460

(ci) remove autofix.ci workflow (#470) by @jdx in #470

(ci) add zizmor workflow for github actions security analysis (#471) by @jdx in #471

(ci) close failing or conflicted PRs sooner (#480) by @jdx in #480

add communique to enhance release notes (#411) by @jdx in #411

migrate from ncc (CJS) to rollup (ESM) (#436) by @jdx in #436

add final job to aggregate build-test results (#438) by @jdx in #438

migrate package manager from npm/pnpm/bun to aube (#455) by @jdx in #455

remove pull_request_target workflow (#469) by @jdx in #469

update aube tool version (#501) by @jdx in #501

4.0.1 - 2026-03-22

🐛 Bug Fixes

run npm install in pre-commit hook before build (#410) by @jdx in #410

🚜 Refactor

extract getCwd() helper to deduplicate working directory resolution (#403) by @altendky in #403

📚 Documentation

bump versions listed im README.md (#407) by @deining in #407

bump more versions listed in README.md (#408) by @deining in #408

⚙️ Miscellaneous Tasks

add workflow to auto-close stale PRs (#409) by @jdx in #409

... (truncated)

Commits

dba1968 chore: release v4.1.0 (#490)
f91a09d fix(ci): resolve zizmor findings (#503)
a9d72a2 chore(deps): update github/codeql-action action to v4.36.0 (#500)
1f56d95 chore(deps): update dependency @actions/cache to v6.0.1 (#497)
e47eed9 chore: update aube tool version (#501)
69c24ed chore(deps): update dependency aube to v1.15.0 (#498)
76f8407 chore(deps): update zizmorcore/zizmor-action action to v0.5.4 (#488)
4a84c91 chore(deps): update dependency eslint to v10.4.0 (#492)
4d5418b chore(deps): update dependency @types/node to v24.12.4 (#485)
e676099 chore(deps): update dependency typescript-eslint to v8.59.3 (#487)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

mergify

Automatically approved by Mergify

mergify · 2026-06-08T03:35:19Z

Merge Protections

🔴 1 of 3 protections blocking · waiting on 🤖 CI

	Protection	Waiting on
🔴	Full CI must pass	🤖 CI
🟢	Do not merge outdated PRs	—
🟢	🚦 Auto-queue	—

🔴 Full CI must pass

Waiting for

check-success = coverage
check-success = quality
check-success = test
check-success = test-cross-platform (macos-latest, macOS)
check-success = test-cross-platform (ubuntu-22.04, Linux)
check-success = test-cross-platform (ubuntu-latest, Linux)
check-success = test-cross-platform (windows-latest, Windows)

This rule is failing.

All CI checks must pass. Release-plz PRs are exempt because they only bump versions and changelogs (code was already tested on main), and GITHUB_TOKEN-triggered force-pushes suppress CI.

check-success = coverage
check-success = quality
check-success = test
check-success = test-cross-platform (macos-latest, macOS)
check-success = test-cross-platform (ubuntu-22.04, Linux)
check-success = test-cross-platform (ubuntu-latest, Linux)
check-success = test-cross-platform (windows-latest, Windows)

Show 2 satisfied protections

🟢 Do not merge outdated PRs

Make sure PRs are within 10 commits of the base branch before merging

#commits-behind <= 10

🟢 🚦 Auto-queue

When all merge protections are satisfied and these conditions match, this pull request will be queued automatically.

dependabot · 2026-06-22T03:34:00Z

A newer version of jdx/mise-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

Rebased onto main to resolve conflicts from the actions/checkout v7 bump. Closes #315 Signed-off-by: UncleSp1d3r <unclesp1d3r@evilbitlabs.io>

mergify

Automatically approved by Mergify

unclesp1d3r · 2026-06-24T01:29:19Z

Rebased onto current main to resolve the conflicts from the actions/checkout v7 bump (the change is now mergeable).

Heads up: CI here fails at the mise install --locked step because v4.1.0 enforces --locked with the newer mise CLI, and the committed lockfile had no rust@latest entry. Fix is in #342 (regenerated mise.lock). Merge #342 first, then this PR will go green on rebase.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 8, 2026

dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jun 8, 2026

mergify Bot previously approved these changes Jun 8, 2026

View reviewed changes

chore(deps): Bump jdx/mise-action from 4.0.1 to 4.1.0

79595b8

Rebased onto main to resolve conflicts from the actions/checkout v7 bump. Closes #315 Signed-off-by: UncleSp1d3r <unclesp1d3r@evilbitlabs.io>

unclesp1d3r dismissed mergify[bot]’s stale review via 79595b8 June 24, 2026 01:23

unclesp1d3r force-pushed the dependabot/github_actions/jdx/mise-action-4.1.0 branch from 5c86d82 to 79595b8 Compare June 24, 2026 01:23

mergify Bot approved these changes Jun 24, 2026

View reviewed changes

unclesp1d3r mentioned this pull request Jun 24, 2026

ci: Regenerate mise.lock so rust@latest resolves under --locked #342

Open

3 tasks

mergify Bot added 6 commits June 29, 2026 03:53

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

fb636af

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

16d2c1f

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

d2a0344

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

32d5bbe

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

aae432b

Merge branch 'main' into dependabot/github_actions/jdx/mise-action-4.1.0

ac1bd70

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): Bump jdx/mise-action from 4.0.1 to 4.1.0#315

chore(deps): Bump jdx/mise-action from 4.0.1 to 4.1.0#315
dependabot[bot] wants to merge 7 commits into
mainfrom
dependabot/github_actions/jdx/mise-action-4.1.0

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading

Uh oh!

mergify Bot left a comment

Uh oh!

mergify Bot commented Jun 8, 2026 •

edited

Loading

🟢 Do not merge outdated PRs

🟢 🚦 Auto-queue

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

mergify Bot left a comment

Uh oh!

unclesp1d3r commented Jun 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.1.0: automatic --locked installs

Added

Automatic --locked install when mise.lock exists (#495) by @​zeitlinger

Fixed

Changed

Changelog

4.1.0 - 2026-06-04

🚀 Features

🐛 Bug Fixes

⚙️ Miscellaneous Tasks

4.0.1 - 2026-03-22

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚙️ Miscellaneous Tasks

Uh oh!

mergify Bot left a comment

Choose a reason for hiding this comment

Uh oh!

mergify Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Protections

🔴 Full CI must pass

🟢 Do not merge outdated PRs

🟢 🚦 Auto-queue

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

mergify Bot left a comment

Choose a reason for hiding this comment

Uh oh!

unclesp1d3r commented Jun 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 8, 2026 •

edited

Loading

Automatic `--locked` install when `mise.lock` exists (#495) by `@zeitlinger`

mergify Bot commented Jun 8, 2026 •

edited

Loading