pin mise

Signed-off-by: Gregor Zeitlinger <[email protected]>

Author: zeitlinger

.github/renovate.json5

@@ -1,12 +1,45 @@
 {
   $schema: "https://docs.renovatebot.com/renovate-schema.json",
-  extends: ["config:best-practices", "config:recommended"],
+  extends: [
+    "config:best-practices",
+    "config:recommended"
+  ],
   platformCommit: "enabled",
   automerge: true,
   ignorePaths: [
-    "**/simpleclient-archive/**", // old projects
+    "**/simpleclient-archive/**",
+    // old projects
     // agent resources packages an OTel API that is the minimum required API version
     "**/prometheus-metrics-exporter-opentelemetry-otel-agent-resources/pom.xml",
   ],
-  labels: ["dependencies"],
+  labels: [
+    "dependencies"
+  ],
+  mackageRules: [
+    {
+      matchPackageNames: [
+        "jdx/mise"
+      ],
+      groupName: "mise",
+      schedule: [
+        "before 4am on monday"
+      ],
+    }
+  ],
+  customManagers: [
+    {
+      customType: "regex",
+      description: "update mise",
+      managerFilePatterns: [
+        "/(^|/)(workflow-templates|\\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\\.ya?ml$/",
+        "/(^|/)action\\.ya?ml$/"
+      ],
+      datasourceTemplate: "github-release-attachments",
+      packageNameTemplate: "jdx/mise",
+      depNameTemplate: "mise",
+      matchStrings: [
+        "jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"
+      ],
+    },
+  ]
 }

.github/workflows/acceptance-tests.yml

@@ -14,5 +14,8 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Run acceptance tests
         run: mise run acceptance-test

.github/workflows/build.yml

@@ -13,6 +13,9 @@ jobs:
         with:
           persist-credentials: false
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Cache local Maven repository
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with:

.github/workflows/github-pages.yaml

@@ -39,6 +39,8 @@ jobs:
           fetch-depth: 0
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
         with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
           cache: "false"
       - name: Setup Pages
         id: pages

.github/workflows/lint-rest.yml

@@ -14,5 +14,8 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Lint
         run: mise run lint-rest

.github/workflows/native-tests.yml

@@ -14,6 +14,9 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
         env:
           MISE_ENV: native
       - name: Run native tests

.github/workflows/test-release-build.yml

@@ -17,6 +17,9 @@ jobs:
         with:
           persist-credentials: false
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Cache local Maven repository
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with: