[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
mise	patch	2026.11.0 → 2026.11.1	2026.11.5 (+3)

---

Release Notes

jdx/mise (mise)

v2026.11.1

Compare Source

🚀 Features

• (config) name sets of environments with env_sets in miserc.toml by @​jdx in #​15327
• (npm) accept gitlab.com CI provenance when npm.provenance is on by @​jdx in #​15335
• (npm) pin an npm tool to the repository its provenance showed by @​jdx in #​15338
• (vfox) show download progress for a PreInstall url by @​jdx in #​15323

🐛 Bug Fixes

• (activate) keep $? for the prompt mise wraps in pwsh by @​meop in #​15315
• (aqua) install Linux musl builds on Android by @​i-api in #​15347
• (backend) keep latest on non-numeric releases under the release-age cutoff by @​jdx in #​15360
• (config) skip a stale tracked file that no config type claims by @​jdx in #​15333
• (lock) keep a v0 lockfile's pin when an alias like lts moves by @​jdx in #​15301
• (lock) leave the global lockfile alone on project installs by @​jdx in #​15348
• (lock) quiet the unsigned-mirror warning and install's background lock rows, and restore the showreel by @​jdx in #​15346
• (npm) keep pnpm installs inside the install dir by @​jdx in #​15330
• (rust) stop querying GitHub when a rustup mirror is configured by @​jdx in #​15326
• (shim) run command wrappers on a read-only filesystem by @​jdx in #​15300
• (upgrade) skip out-of-range note for versions another entry already uses by @​jdx in #​15359
• (zig) install from the lockfile URL and fix the fallback archive name by @​jdx in #​15351

📚 Documentation

• (install) recommend the PowerShell script on Windows by @​jdx in #​15332

🧪 Testing

• (docs) accept curl flags in the showreel's README install check by @​jdx in #​15324

📦️ Dependency Updates

• lock file maintenance by @​renovate[bot] in #​15319
• update rust crate jsonschema to 0.60 by @​renovate[bot] in #​15311
• lock file maintenance by @​renovate[bot] in #​15325
• update rattler by @​renovate[bot] in #​15336
• ignore unmaintained astral-tokio-tar and pin-utils in cargo-deny by @​jdx in #​15352
• update jdx crates to v7.2.0 by @​renovate[bot] in #​15342
• update mise tools to latest by @​renovate[bot] in #​15350
• update github actions by @​renovate[bot] in #​15309

📦 Registry

• fix blaze test for the ra-jit to blaze rename by @​jdx in #​15371

Ci

• (docs) fail the docs deploy when the showreel has no render by @​jdx in #​15344

Security

• (npm) breaking verify npm provenance by default by @​jdx in #​15341

New Contributors

• @​meop made their first contribution in #​15315

📦 Aqua Registry Updates

Updated Packages (1)

• supabase/cli

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SCANDOCKER-109

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating the mise version in build workflows may change tool installation behavior and cause CI builds to fail or produce different results.

Bumps the mise dependency from 2026.11.0 to 2026.11.1 via a Renovate patch update, covering release fixes such as keeping a v0 lockfile's pin when an alias moves and verifying npm provenance by default. No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected

Cross-PR 1 PR inspected 0 open impacts

PR 329: SCANDOCKER-91 Validate the Docker image using trivy Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[zglicz]

Auto-approved: Renovate update.