Skip to content

ci: add mise version+sha256 pinning to CI #1904

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
zeitlinger merged 5 commits into from
Feb 26, 2026
Merged

ci: add mise version+sha256 pinning to CI #1904

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
c9655a6
Add mise version+sha256 pinning to CI workflows
zeitlinger Feb 20, 2026
454ef3c
Add mise entries to renovate-tracked-deps.json
zeitlinger Feb 20, 2026
9ec6576
fix: auto-fix CI failure
zeitlinger Feb 23, 2026
32e2ad4
fix: auto-fix CI failure
zeitlinger Feb 23, 2026
2b3b458
Revert "fix: auto-fix CI failure"
zeitlinger Feb 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions .github/renovate-tracked-deps.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,33 @@
".github/renovate.json5": {
"renovate-config-presets": ["grafana/flint"]
},
".github/workflows/acceptance-tests.yml": {
"regex": ["mise"]
},
".github/workflows/build.yml": {
"regex": ["mise"]
},
".github/workflows/github-pages.yaml": {
"regex": ["mise"]
},
".github/workflows/java-version-matrix-tests.yml": {
"regex": ["mise"]
},
".github/workflows/lint.yml": {
"regex": ["mise"]
},
".github/workflows/native-tests.yml": {
"regex": ["mise"]
},
".github/workflows/nightly-benchmarks.yml": {
"regex": ["mise"]
},
".github/workflows/release.yml": {
"regex": ["mise"]
},
".github/workflows/test-release-build.yml": {
"regex": ["mise"]
},
Comment on lines +5 to +31
Copy link
Collaborator

@jaydeluca jaydeluca Feb 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

could we just do something like this?

  ".github/workflows/*": {
    "regex": ["mise"]
  },

Copy link
Member Author

@zeitlinger zeitlinger Feb 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the suggestion! Unfortunately, this linter doesn't support wildcard patterns like that. If you'd like to see this feature added, please create an issue in the flint repository to discuss the enhancement.

".mise/envs/native/mise.toml": {
"mise": ["java"]
},
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/acceptance-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,5 +14,8 @@ jobs:
persist-credentials: false
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
- name: Run acceptance tests
run: mise run acceptance-test
3 changes: 3 additions & 0 deletions .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,9 @@ jobs:
with:
persist-credentials: false
- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
- name: Cache local Maven repository
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/github-pages.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,8 @@ jobs:
fetch-depth: 0
- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
cache: "false"
- name: Setup Pages
id: pages
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/java-version-matrix-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,9 @@ jobs:

- name: Set up mise
uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a

- name: Cache local Maven repository
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,9 @@ jobs:

- name: Setup mise
uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a

- name: Lint
env:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/native-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ jobs:
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
working_directory: .mise/envs/native
- name: Run native tests
working-directory: .mise/envs/native
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/nightly-benchmarks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,9 @@ jobs:

- name: Setup mise
uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a

- name: Cache local Maven repository
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ jobs:

- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
cache: false

- name: Build release version
Expand Down
3 changes: 3 additions & 0 deletions .github/workflows/test-release-build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,9 @@ jobs:
fetch-tags: "true"
fetch-depth: 0
- uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
with:
version: v2026.2.11
sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
- name: Cache local Maven repository
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
with:
Expand Down