[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
mise	patch	2026.10.22 → 2026.10.23	2026.11.0 (+2)

---

Release Notes

jdx/mise (mise)

v2026.10.23

Compare Source

🚀 Features

• (dotfiles) apply block, line, and merge edits from a dotfile group by @​jdx in #​15131
• (dotfiles) merge into INI files such as pip.conf and tox.ini by @​jdx in #​15135
• (dotfiles) deploy files stored in fnox with mode = "fnox" by @​jdx in #​15134
• (gem) list versions from a source's compact index, so GitHub Packages gems resolve latest by @​waynehoover in #​15122

🐛 Bug Fixes

• (backend) name the program when a command can't be found by @​jdx in #​15119
• (lock) keep the locks/ sidecar layout for a symlinked global config dir by @​jdx in #​15125
• (lockfile) keep a dotfiles checkout's lockfile URLs when it is linked into global config by @​jdx in #​15130
• (ls) show uninstalled lazy tools as lazy instead of missing by @​jdx in #​15114
• (node) keep a packageManager checksum from pinning later installs to npm by @​jdx in #​15124
• (self-update) retry replacing mise.exe on Windows while antivirus holds it by @​jdx in #​15138
• (shell) convert MANPATH to POSIX form when activating under MSYS2/Cygwin by @​jdx in #​15117
• (shim) keep other command wrappers active inside a wrapped command by @​jdx in #​15126
• (uninstall) don't remove 3.4.12 when asked to uninstall 3.4.1 by @​jdx in #​15116

📚 Documentation

• rewrite README with upfront config example and bootstrap guide by @​jdx in #​15136

⚡ Performance

• (dotfiles) write snapshot blobs without a git process per tracked file by @​waynehoover in #​15127

🧪 Testing

• (dotfiles) set group in the INI merge symlink test by @​jdx in #​15139

📦 Registry

• stop checking cargo-msrv's reported version in its test by @​jdx in #​15137

Security

• (secrets) refuse project grants of keys from your own fnox config by @​jdx in #​15133

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SCANDOCKER-105

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating mise from 2026.10.22 to 2026.10.23 in the build workflow could change tool installation or resolution and disrupt CI builds.

Bumps the mise dependency from 2026.10.22 to 2026.10.23, a patch release with dotfiles, backend, and shell bug fixes plus a security fix refusing project grants of keys from a user's own fnox config. No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected

Cross-PR 1 PR inspected 0 open impacts

PR 329: SCANDOCKER-91 Validate the Docker image using trivy Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube