Skip to content

Pin dependencies - #77

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions
Open

Pin dependencies#77
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Jun 1, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
SonarSource/ci-github-actions action pin v11.8.9
SonarSource/gh-action_cache action pin v1v1.7.2
SonarSource/gh-action_cache action pinDigest a7d13cd
SonarSource/gh-action_pre-commit action patch 1.2.01.2.1
SonarSource/vault-action-wrapper action minor 3.5.03.6.1
actions/cache action minor v5.0.5v5.1.0
actions/checkout action minor v6.0.2v6.1.0
jdx/mise uses-with minor 2025.7.122025.12.13
jdx/mise-action action minor v4.0.1v4.2.4

Warnings (1)

Please correct - or verify that you can safely ignore - these warnings before you merge this PR.

  • SonarSource/ci-github-actions: Could not determine new digest for update (github-tags package SonarSource/ci-github-actions)


Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Release Notes

SonarSource/gh-action_pre-commit (SonarSource/gh-action_pre-commit)

v1.2.1

Compare Source

What's Changed

Dependency Updates
Package Update Change
actions/setup-python minor v6.1.0v6.3.0 (#​45)
nick-fields/assert-action pin v4v4.0.1 (#​45)
actions/cache major v5.0.1v6.1.0 (#​46)
actions/checkout major v6.0.1v7.0.0 (#​46)
nick-fields/assert-action major v2.0.0v4.0.1 (#​46)
nick-fields/assert-action major v2v4 (#​46)
Internal & Chores
  • Added GitHub workflows (PullRequestClosed, PullRequestCreated, RequestReview, SubmitReview) to automate Jira status updates on PR review events, using SonarSource/vault-action-wrapper for credential retrieval (#​49, BUILD-11517)

Full Changelog: SonarSource/gh-action_pre-commit@1.2.0...1.2.1

SonarSource/vault-action-wrapper (SonarSource/vault-action-wrapper)

v3.6.1

Compare Source

What's Changed

Full Changelog: SonarSource/vault-action-wrapper@3.5.1...3.6.1

v3.5.1

Compare Source

What's Changed
New Contributors

Full Changelog: SonarSource/vault-action-wrapper@3.5.0...3.5.1

actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

v6.1.0

Compare Source

v6.0.3

Compare Source

jdx/mise (jdx/mise)

v2025.12.13

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
🧪 Testing
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2025.12.12

Compare Source

🚀 Features
  • (backend) add version timestamps for spm, conda, and gem backends by @​jdx in #​7383
  • (backend) add security features to github backend by @​jdx in #​7387
  • (ruby) add GitHub attestation verification for precompiled binaries by @​jdx in #​7382
🐛 Bug Fixes
  • (aqua) improve security feature detection by @​jdx in #​7385
  • (github) use version_prefix when fetching release for SLSA verification by @​jdx in #​7391
🚜 Refactor
🧪 Testing

v2025.12.11

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
🧪 Testing
  • (e2e) fix and rename ubi and vfox_embedded_override tests by @​jdx in 052ea40
📦 Registry
Chore
  • (registry) disable flaky tests for gitu and ktlint by @​jdx in 64151cb
  • resolve clippy warnings and add stricter CI check by @​jdx in #​7367
  • suppress dead_code warnings in asset_matcher module by @​jdx in #​7377
New Contributors

v2025.12.10

Compare Source

🐛 Bug Fixes
  • (backend) fix fuzzy_match_filter regex for vendor-prefixed versions by @​jdx in #​7332
  • (backend) use backend delegation for install-time option filtering by @​jdx in #​7335
  • (duration) support calendar units in relative durations for --before flag by @​Copilot in #​7337
  • (gem) improve shebang compatibility for precompiled Ruby by @​jdx in #​7336
  • (gem) handle RubyGems polyglot shebang format by @​jdx in #​7340
  • (pipx) use minor version symlink for venv Python by @​jdx in #​7339
  • (registry) prefer claude-code latest over stale stable by @​jdx in #​7334
  • (upgrade) only check specified tools when upgrading with tool args by @​jdx in #​7331
📚 Documentation

v2025.12.9

Compare Source

🚀 Features
🐛 Bug Fixes
📦 Registry

v2025.12.8

Compare Source

🚀 Features
  • (conda) add dependency resolution for conda packages by @​jdx in #​7280
  • (go) add created_at support to ls-remote --json by @​jdx in #​7305
  • (hook-env) add hook_env.cache_ttl and hook_env.chpwd_only settings for NFS optimization by @​jdx in #​7312
  • (hooks) add MISE_TOOL_NAME and MISE_TOOL_VERSION to preinstall/postinstall hooks by @​jdx in #​7311
  • (shell_alias) add shell_alias support for cross-shell aliases by @​jdx in #​7316
  • (tool) add security field to mise tool --json by @​jdx in #​7303
  • add --before flag for date-based version filtering by @​jdx in #​7298
🐛 Bug Fixes
📚 Documentation
🧪 Testing
  • (e2e) disable debug mode by default for windows-e2e by @​jdx in #​7318
New Contributors

v2025.12.7

Compare Source

🚀 Features
  • (java) add created_at support to ls-remote --json by @​jdx in #​7297
  • (ls-remote) add created_at timestamps to ls-remote --json for more backends by @​jdx in #​7295
  • (ls-remote) add created_at timestamps to ls-remote --json for core plugins by @​jdx in #​7294
  • (registry) add --json flag to registry command by @​jdx in #​7290
  • (ruby) add created_at timestamps to ls-remote --json by @​jdx in #​7296
🐛 Bug Fixes
New Contributors

v2025.12.6

Compare Source

🚀 Features
  • add anonymous download tracking for tool popularity stats by @​jdx in #​7289
🐛 Bug Fixes
  • add --compressed flag to curl for Swift GPG keys by @​jdx in 7bc1273
📚 Documentation

v2025.12.5

Compare Source

🚀 Features
  • (ls-remote) add --json flag with created_at timestamps by @​jdx in #​7279
🐛 Bug Fixes
  • (config) respect MISE_CONFIG_DIR when set to non-default location by @​jdx in #​7271
  • (http) move http-tarballs from cache to data directory by @​jdx in #​7273
  • (pipx) expand wildcards in install command for backend tools by @​jdx in #​7275
  • (tasks) position-based flag parsing for mise run by @​jdx in #​7278
  • (tera) handle empty strings in path filters by @​jdx in #​7276
  • (vfox) make mise_env and mise_path hooks optional by @​jdx in #​7274
📚 Documentation

v2025.12.4

Compare Source

🚀 Features

v2025.12.3

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
🧪 Testing
📦️ Dependency Updates
Chore
New Contributors

v2025.12.2

Compare Source

🐛 Bug Fixes
📦 Registry

v2025.12.1

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
🧪 Testing
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2025.12.0

Compare Source

🚀 Features
🐛 Bug Fixes
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2025.11.11

Compare Source

🚀 Features
  • (backend) add filter_bins option to github/gitlab backends by @​risu729 in #​7105
  • (ci) auto-close PRs from non-maintainers by @​jdx in #​7108
  • (conda) add conda backend for installing packages from conda-forge by @​jdx in #​7139
  • (github) add rename_exe option and switch elm, opam, yt-dlp from ubi by @​jdx in #​7140
  • (install) add --locked flag for strict lockfile mode by @​jdx in #​7098
  • (lock) implement cross-platform lockfile generation by @​jdx in #​7091
  • (lockfile) add options field for tool artifact identity by @​jdx in #​7092
  • (lockfile) add env field and local lockfile support by @​jdx in #​7099
  • (lockfile) add URL support for deno, go, and zig backends by @​jdx in #​7112
  • (lockfile) add URL support for vfox backend by @​jdx in #​7114
  • (lockfile) add multi-platform checksums without downloading tarballs by @​jdx in #​7113
🐛 Bug Fixes
  • (backend) allow platform-specific strip_components by @​risu729 in #​7106
  • (backend) prefer path root for bin path if it contains an executable by @​risu729 in #​7151
  • (bash) avoid deactivate error on (no)unset PROMPT_COMMAND by @​scop in #​7096
  • (ci) use updatedAt instead of createdAt for stale PR detection by @​jdx in #​7109
  • (config) increase fetch_remote_versions_timeout default to 20s by @​jdx in #​7157
  • (github) search subdirectories for executables in discover_bin_paths by @​jdx in #​7138
  • (lockfile) combine api_url with asset_pattern for GitHub release URLs by @​jdx in #​7111
🚜 Refactor
📚 Documentation
📦️ Dependency Updates

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "after 7am every weekday,before 8pm every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner June 1, 2026 09:05
@renovate renovate Bot added the dependencies label Jun 1, 2026
@renovate

renovate Bot commented Jun 1, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined
Post-upgrade command 'pre-commit autoupdate --freeze || true' has not been added to the allowed list in allowedCommands

@renovate
renovate Bot temporarily deployed to sca-checking June 1, 2026 09:05 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 2605924 to 0062672 Compare June 1, 2026 13:44
@renovate
renovate Bot temporarily deployed to sca-checking June 1, 2026 13:44 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 0062672 to f03c254 Compare June 2, 2026 08:16
@renovate
renovate Bot temporarily deployed to sca-checking June 2, 2026 08:16 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from f03c254 to 2ea3e37 Compare June 5, 2026 16:01
@renovate
renovate Bot temporarily deployed to sca-checking June 5, 2026 16:01 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 2ea3e37 to 0f9c734 Compare June 8, 2026 07:59
@renovate
renovate Bot temporarily deployed to sca-checking June 8, 2026 07:59 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 0f9c734 to 1681f8a Compare June 8, 2026 12:36
@renovate
renovate Bot temporarily deployed to sca-checking June 8, 2026 12:36 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 1681f8a to e472c82 Compare June 9, 2026 07:44
@renovate
renovate Bot temporarily deployed to sca-checking June 9, 2026 07:45 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from e472c82 to 92a8f60 Compare June 12, 2026 08:52
@renovate
renovate Bot temporarily deployed to sca-checking June 12, 2026 08:52 Inactive
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 92a8f60 to f95906c Compare June 15, 2026 10:04
@renovate
renovate Bot deployed to sca-checking June 15, 2026 10:04 Active
@renovate
renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from d5a47b9 to b6f8a91 Compare June 18, 2026 15:21
@renovate
renovate Bot force-pushed the renovate/github-actions branch 3 times, most recently from 3356e1a to 621bbfc Compare June 28, 2026 00:17
@renovate
renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from 5ce4a26 to 2c002db Compare July 6, 2026 15:08
@renovate
renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from 2e7aa44 to 202d2b9 Compare July 18, 2026 23:55
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 202d2b9 to 122aa08 Compare July 25, 2026 19:39
@renovate
renovate Bot force-pushed the renovate/github-actions branch 2 times, most recently from 7d48bd4 to 55e4243 Compare August 6, 2026 03:54
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 55e4243 to 4ef9e1a Compare August 6, 2026 12:10
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 4ef9e1a to c4433cd Compare August 7, 2026 10:43
@sonarqubecloud

sonarqubecloud Bot commented Aug 7, 2026

Copy link
Copy Markdown

@sonarqube-cloud-us

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants