[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
mise	patch	2026.10.21 → 2026.10.22	2026.10.25 (+2)

---

Release Notes

jdx/mise (mise)

v2026.10.22

Compare Source

🚀 Features

• (bootstrap) print a hook's description or one line instead of its whole script by @​jdx in #​15106
• (dotfiles) add create_if_missing to seed a file once by @​jdx in #​15080
• (dotfiles) set permissions on a file a merge entry creates by @​jdx in #​15087
• (dotfiles) merge into JSONC files such as VS Code's settings.json by @​jdx in #​15077
• (http) add ipv4_only setting for hosts that fail over IPv6 by @​jdx in #​15057
• (shell) add --all to mise shell --unset by @​jdx in #​15088
• (uninstall) add --local to remove a project's installed tools by @​jdx in #​15079
• (vars) add --json and --json-extended to mise vars by @​jdx in #​15069
• add --no-global and --project scope flags, deprecate --local by @​jdx in #​15081

🐛 Bug Fixes

• (aqua) stop warning "invalid aqua tool" for custom registry packages by @​jdx in #​15048
• (backends) handle empty lock directories when switching backends by @​zeitlinger in #​15060
• (config) treat an empty system_packages.elevate_with as "never elevate" by @​jdx in #​15049
• (config) stop warning about a version-file link to a sibling version file by @​jdx in #​15058
• (core) point node@​lts at Node.js 26 by @​jdx in #​15105
• (gem) quote paths in generated wrapper scripts by @​jdx in #​15055
• (github) ask for fewer releases when api.github.com times out listing them by @​jdx in #​15078
• (lock) install pipx tools when only the current platform is locked by @​jdx in #​15091
• (packslip) log versions held back by minimum_release_age at debug level by @​jdx in #​15056
• (prune) keep only the running version of a tool started through a moved link by @​jdx in #​15113
• (release) include shell completions in Debian packages by @​gilesw in #​15074
• (remote-source) validate git ref in remote git sources by @​Huge in #​14832
• (version) never report a latest version older than the running one in version --json by @​jdx in #​15068
• hide the Windows console for prompt-started tool updates by @​yusoofsh in #​15038

📚 Documentation

• (secrets) note that fnox daemon reads need fnox 1.43.0 by @​jdx in #​15115

📦️ Dependency Updates

• update github actions by @​renovate[bot] in #​15039
• update ubuntu docker tag to resolute-20261006 by @​renovate[bot] in #​15040
• update rust crates by @​renovate[bot] in #​15041
• update github actions by @​renovate[bot] in #​15046
• lock file maintenance by @​renovate[bot] in #​15043
• update mise tools by @​renovate[bot] in #​15042
• update rust crates to v1.12.0 by @​renovate[bot] in #​15050
• lock file maintenance by @​renovate[bot] in #​15062
• update aube to v2.8.4 by @​renovate[bot] in #​15072
• update swatinem/rust-cache digest to d1527c8 by @​renovate[bot] in #​15064
• lock file maintenance by @​renovate[bot] in #​15073
• update rust crates to v1.12.0 by @​renovate[bot] in #​15065
• stop lock file maintenance from downgrading crates by @​jdx in #​15086
• update jdx/packslip action to v1.9.1 by @​renovate[bot] in #​15083
• update rust crate jdx-tar to v1.1.2 by @​renovate[bot] in #​15089
• lock file maintenance by @​renovate[bot] in #​15085
• lock file maintenance by @​renovate[bot] in #​15093
• update dependency node to v26 by @​renovate[bot] in #​15095
• lock file maintenance by @​renovate[bot] in #​15097
• lock file maintenance by @​renovate[bot] in #​15099
• lock file maintenance by @​renovate[bot] in #​15100

📦 Registry

• fix docuum and android-sdk test expectations by @​jdx in #​15067
• add aqua for oxfmt by @​scop in #​15092

New Contributors

• @​gilesw made their first contribution in #​15074
• @​yusoofsh made their first contribution in #​15038

📦 Aqua Registry Updates

Updated Packages (9)

• aquaproj/aqua-registry-updater
• lintnet/lintnet
• suzuki-shunsuke/ghproj
• suzuki-shunsuke/github-comment
• suzuki-shunsuke/rgo
• suzuki-shunsuke/sort-issue-template
• suzuki-shunsuke/tfmv
• suzuki-shunsuke/tfprovidercheck
• suzuki-shunsuke/tfrstate

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SCANDOCKER-101

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating mise in both build workflow jobs could change tool installation or build behavior, affecting generated artifacts or CI results.

Renovate bump of the mise tool dependency from 2026.10.21 to 2026.10.22 in the Docker CLI image. No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected

Cross-PR 1 PR inspected 0 open impacts

PR 329: SCANDOCKER-91 Validate the Docker image using trivy Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[zglicz]

Auto-approved: Renovate update.