[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
mise	patch	2026.11.3 → 2026.11.4	2026.11.7 (+2)

---

Release Notes

jdx/mise (mise)

v2026.11.4

Compare Source

🚀 Features

• (task) support zip:: includes for config and tasks by @​jdx in #​15439

🐛 Bug Fixes

• (bootstrap) match ufw rules with a source CIDR and ignore the locale by @​jdx in #​15450
• (completion) forward a shim's completion request to its tool by @​jdx in #​15429
• (config) honor tool aliases in enable and disable filters by @​jdx in #​15437
• (copr) build releases for fedora 45 by @​jdx in #​15441
• (dot) merge independent exclude additions instead of failing sync by @​jdx in #​15449
• (prune) resolve a project's tool_alias for its [tools] entries by @​jdx in #​15438

📚 Documentation

• (contributing) state that external pull requests are not accepted by @​jdx in 738c879
• note that fish 4.9.3 loads mise completions itself by @​jdx in #​15442

📦️ Dependency Updates

• update jdx crates to v7.3.0 by @​renovate[bot] in #​15434

📦 Aqua Registry Updates

New Packages (6)

• babarot/regomark
• ewhauser/shuck
• microsoft/apm
• nushell/nufmt
• sigoden/argc
• tiny-earth-moon/outskirts

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SCANCLI-292

[gitar-bot]

Code Review 👍 Approved with suggestions 🟡 Medium risk 0 closed / 1 findings

Updating mise across three CI jobs changes tool provisioning and could alter dependency installation or build execution.

Bumps mise from 2026.11.3 to 2026.11.4 across the .github/workflows/build.yml mise-action pins at lines 80, 109 and 167. Approved with a suggestion: if #288 (Gradle migration) merges after this PR and keeps its own 2026.5.12 pin, it would silently revert this update, so its rebase should set the version to 2026.11.4.

💡 Cross-PR: Gradle migration would roll mise back to 2026.5.12 · #288

📄 .github/workflows/build.yml:80 📄 .github/workflows/build.yml:109 📄 .github/workflows/build.yml:167

Breaks when this PR merges first and #288 (Gradle migration) merges afterwards while keeping its own build.yml, which still pins mise 2026.5.12.

How

1. This PR sets the mise-action version to 2026.11.4 at .github/workflows/build.yml:80, :109 and :167.
2. #288 restructures the same workflow and pins mise-action version: 2026.5.12 at .github/workflows/build.yml:35.
3. #288 rewrites the whole workflow layout, so resolving the conflict in its favor brings back the older pin and quietly undoes this update.

Fix

• This PR: nothing needed
• #288: When rebasing onto master, set every mise-action version to 2026.11.4 (or whatever master has at that point) and don't keep 2026.5.12.

Compared 588a615 with #288 at 3ea7b56

🤖 Prompt for agents

Code Review: Bumps mise from `2026.11.3` to `2026.11.4` across the `.github/workflows/build.yml` mise-action pins at lines 80, 109 and 167. Approved with a suggestion: if #288 (Gradle migration) merges after this PR and keeps its own `2026.5.12` pin, it would silently revert this update, so its rebase should set the version to `2026.11.4`.

1. 💡 Cross-PR: Gradle migration would roll mise back to 2026.5.12 · [#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>)
   Files: .github/workflows/build.yml:80, .github/workflows/build.yml:109, .github/workflows/build.yml:167

   **Breaks when** this PR merges first and [#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>) (Gradle migration) merges afterwards while keeping its own `build.yml`, which still pins mise `2026.5.12`.
   
   **How**
   
   1. This PR sets the mise-action `version` to `2026.11.4` at `.github/workflows/build.yml:80`, `:109` and `:167`.
   2. [#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>) restructures the same workflow and pins mise-action `version: 2026.5.12` at `.github/workflows/build.yml:35`.
   3. [#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>) rewrites the whole workflow layout, so resolving the conflict in its favor brings back the older pin and quietly undoes this update.
   
   **Fix**
   
   - **This PR:** nothing needed
   - **[#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>):** When rebasing onto master, set every mise-action `version` to `2026.11.4` (or whatever master has at that point) and don't keep `2026.5.12`.
   
   _Compared `588a615` with [#288](<https://github.com/SonarSource/sonar-scanner-cli/pull/288>) at `3ea7b56`_

Verification Rules 3/3 met PRs 2 inspected

Functional validation No results

Rules 3 passed 1 not applicable

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 2 inspected

Cross-PR 2 PRs inspected 1 open impact

PR 352: Update dependency jdx/mise to v2026.11.4 Inspected
PR 288: SCANCLI-232 Migrate the build from Maven to Gradle Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[gitar-bot]

💡 Cross-PR: Gradle migration would roll mise back to 2026.5.12 · #288

Breaks when this PR merges first and #288 (Gradle migration) merges afterwards while keeping its own build.yml, which still pins mise 2026.5.12.

How

1. This PR sets the mise-action version to 2026.11.4 at .github/workflows/build.yml:80, :109 and :167.
2. #288 restructures the same workflow and pins mise-action version: 2026.5.12 at .github/workflows/build.yml:35.
3. #288 rewrites the whole workflow layout, so resolving the conflict in its favor brings back the older pin and quietly undoes this update.

Fix

• This PR: nothing needed
• #288: When rebasing onto master, set every mise-action version to 2026.11.4 (or whatever master has at that point) and don't keep 2026.5.12.

Compared 588a615 with #288 at 3ea7b56

_{Was this helpful? React with 👍 / 👎}

[zglicz]

Auto-approved: Renovate dependency update.