Commit graph

633 commits

Author SHA1 Message Date
autofix-ci[bot]
2067db489e
[autofix.ci] apply automated fixes 2026-04-29 14:00:45 +00:00
jdx
fd6530d89f
chore: migrate package manager from npm/pnpm/bun to aube
Switches the project's package-manager surface from a mix of
npm / pnpm / bun (different commands in different files) to a
single tool: [aube](https://aube.en.dev), en.dev's pnpm-compat
package manager (native Rust, fast, drops cleanly into pnpm /
npm-compatible workflows).

## What changed

- **Workflows** (`.github/workflows/*.yml`): every `npm ci` →
  `aube ci`; every `npm run X` → `aube run X`. The
  `actions/setup-node@…` step still pins Node, then a new
  `jdx/mise-action@v4` step with `install_args: aube` installs
  aube. The `cache: npm` directive on `setup-node` is dropped
  (aube uses its own store under `~/.cache/aube`; reusing the
  npm cache wouldn't help).
- **`mise.toml`**: every task that ran `npm run X` or
  `bun run X` now runs `aube run X`. Added `aube = '1.3'` to
  the tool list so `mise install` provisions it locally.
- **`CLAUDE.md`**: development command snippets updated to
  `aube install` / `aube run all` etc.

## What didn't change

- **`package-lock.json`** stays as the canonical lockfile —
  aube reads it directly, no separate `aube-lock.yaml` is
  generated. Running `npm install` still works for any dev
  who hasn't switched to aube yet.
- **`package.json` scripts** still use `npm run X` for nested
  invocations (e.g. `"all": "npm run format:write && …"`). The
  literal `npm` in those works for both npm callers and aube
  callers (aube exec'd shell finds `npm` in PATH; the inner
  invocation reads the same package.json scripts). Avoiding
  the rewrite to `aube run X` here keeps the scripts
  PM-agnostic.
- **`dist/`** is byte-identical after `aube run all` —
  parity with npm-built dist verified locally before this
  commit.

## `.npmrc`

Adds a single line: `node-linker=hoisted`. This is the
pnpm/aube key that forces a flat, npm-style `node_modules`
layout instead of the default symlink/virtual-store layout.
Required because `rollup --configPlugin @rollup/plugin-typescript`
needs to resolve the plugin from cwd's node_modules; the
isolated layout puts rollup under `node_modules/.aube/...`
where standard module resolution can't reach back to the
project root for the plugin. npm reads `.npmrc` too but
ignores `node-linker` (npm always installs flat), so the
file is safe for both PMs.

## Why aube

Single tool replacing three: less context-switching for
contributors, fewer places to run `npm audit` / `bun
upgrade` / `pnpm dedupe`, and aube's resolver is faster
than npm's (the `aube install` cold-cache run takes
~3s vs `npm ci` at ~10s for this repo's deps).
2026-04-29 08:57:33 -05:00
renovate[bot]
3cd8ad48b8
chore(deps): lock file maintenance (#439)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - "before 4am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-29 13:10:10 +00:00
jdx
1c5f70fd40
chore(deps): bump communique to 1.1.2 (#453)
## Summary
- add a communique mise lock entry for v1.1.2
- include release asset URLs and checksums, including musl assets

## Validation
- monitored jdx/communique release workflow 24960017639 to success
- `mise install --locked communique`

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: adds an auto-generated tool lockfile entry only, affecting
developer tool installation but not runtime application behavior.
> 
> **Overview**
> Pins the `communique` developer tool to **v1.1.2** by adding a
generated `mise.lock` entry.
> 
> The lock includes **per-platform download URLs, asset API links, and
SHA-256 checksums**, including *musl* variants for Linux.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
7bbd9716bd. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
2026-04-26 15:36:56 +00:00
renovate[bot]
5ad13376e3
chore(deps): update autofix-ci/action digest to c5b2d67 (#452)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [autofix-ci/action](https://redirect.github.com/autofix-ci/action)
([changelog](7a166d7532..c5b2d67aa2))
| action | digest | `7a166d7` → `c5b2d67` |

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzkuNyIsInVwZGF0ZWRJblZlciI6IjQzLjEzOS43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-24 08:34:36 +00:00
renovate[bot]
6fa7302151
chore(deps): update actions/setup-node digest to 48b55a0 (#451)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node)
([changelog](53b83947a5..48b55a011b))
| action | digest | `53b8394` → `48b55a0` |

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzkuNyIsInVwZGF0ZWRJblZlciI6IjQzLjEzOS43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-24 08:34:23 +00:00
renovate[bot]
db69447ab3
chore(deps): update dependency eslint to v10.2.1 (#445)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [eslint](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint)) | [`10.2.0` →
`10.2.1`](https://renovatebot.com/diffs/npm/eslint/10.2.0/10.2.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/10.2.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/10.2.0/10.2.1?slim=true)
|

---

### Release Notes

<details>
<summary>eslint/eslint (eslint)</summary>

###
[`v10.2.1`](https://redirect.github.com/eslint/eslint/compare/v10.2.0...4d1d8f9737236603f64bbe83d5bb8001627b5611)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.2.0...v10.2.1)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 22:38:05 +00:00
renovate[bot]
89d8187abc
chore(deps): update dependency typescript to v6.0.3 (#442)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [typescript](https://www.typescriptlang.org/)
([source](https://redirect.github.com/microsoft/TypeScript)) | [`6.0.2`
→ `6.0.3`](https://renovatebot.com/diffs/npm/typescript/6.0.2/6.0.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/6.0.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/6.0.2/6.0.3?slim=true)
|

---

### Release Notes

<details>
<summary>microsoft/TypeScript (typescript)</summary>

###
[`v6.0.3`](https://redirect.github.com/microsoft/TypeScript/compare/v6.0.2...050880ce59e30b356b686bd3144efe24f875ebc8)

[Compare
Source](https://redirect.github.com/microsoft/TypeScript/compare/v6.0.2...v6.0.3)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 14:59:38 -05:00
renovate[bot]
4513fc1bd4
chore(deps): update dependency typescript-eslint to v8.58.2 (#443)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| [`8.58.1` →
`8.58.2`](https://renovatebot.com/diffs/npm/typescript-eslint/8.58.1/8.58.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.58.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.58.1/8.58.2?slim=true)
|

---

### Release Notes

<details>
<summary>typescript-eslint/typescript-eslint
(typescript-eslint)</summary>

###
[`v8.58.2`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8582-2026-04-13)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.58.1...v8.58.2)

##### 🩹 Fixes

- remove tsbuildinfo cache file from published packages
([#&#8203;12187](https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12187))

##### ❤️ Thank You

- Abhijeet Singh [@&#8203;cseas](https://redirect.github.com/cseas)

See [GitHub
Releases](https://redirect.github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.2)
for more information.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 14:59:36 -05:00
renovate[bot]
2f9976bb5b
chore(deps): update dependency prettier to v3.8.3 (#441)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [prettier](https://prettier.io)
([source](https://redirect.github.com/prettier/prettier)) | [`3.8.2` →
`3.8.3`](https://renovatebot.com/diffs/npm/prettier/3.8.2/3.8.3) |
![age](https://developer.mend.io/api/mc/badges/age/npm/prettier/3.8.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prettier/3.8.2/3.8.3?slim=true)
|

---

### Release Notes

<details>
<summary>prettier/prettier (prettier)</summary>

###
[`v3.8.3`](https://redirect.github.com/prettier/prettier/compare/3.8.2...3.8.3)

[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.8.2...3.8.3)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 19:08:49 +00:00
renovate[bot]
4d6abcf45f
chore(deps): update dependency globals to v17.5.0 (#444)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [globals](https://redirect.github.com/sindresorhus/globals) |
[`17.4.0` →
`17.5.0`](https://renovatebot.com/diffs/npm/globals/17.4.0/17.5.0) |
![age](https://developer.mend.io/api/mc/badges/age/npm/globals/17.5.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/globals/17.4.0/17.5.0?slim=true)
|

---

### Release Notes

<details>
<summary>sindresorhus/globals (globals)</summary>

### [`v17.5.0`]()

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.4.0...v17.5.0)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 18:30:37 +00:00
renovate[bot]
f1b645161c
chore(deps): update github/codeql-action digest to 95e58e9 (#440)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](c10b8064de..95e58e9a2c))
| action | digest | `c10b806` → `95e58e9` |

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-17 06:12:26 +00:00
renovate[bot]
d6e9fb75ae
chore(deps): update dependency typescript-eslint to v8.58.1 (#422)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| [`8.58.0` →
`8.58.1`](https://renovatebot.com/diffs/npm/typescript-eslint/8.58.0/8.58.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.58.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.58.0/8.58.1?slim=true)
|

---

### Release Notes

<details>
<summary>typescript-eslint/typescript-eslint
(typescript-eslint)</summary>

###
[`v8.58.1`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8581-2026-04-08)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.58.0...v8.58.1)

This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.

See [GitHub
Releases](https://redirect.github.com/typescript-eslint/typescript-eslint/releases/tag/v8.58.1)
for more information.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 19:19:46 +00:00
jdx
a407fefef5
ci: add final job to aggregate build-test results (#438)
## Summary
- Add a `final` job to the build-test workflow that depends on all other
jobs
- Fails if any upstream job failed or was skipped
- Provides a single required status check for branch protection

## Test plan
- [ ] `final` job passes when all other jobs pass
- [ ] `final` job fails when any upstream job fails

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: workflow-only change that adds a single aggregator job and
doesn’t affect production code paths. Main risk is misconfiguring branch
protection expectations if the `final` job logic/conditions are wrong.
> 
> **Overview**
> Adds a `final` GitHub Actions job to the `build-test` workflow that
depends on all other jobs and runs with `if: always()`.
> 
> The `final` job fails the workflow if any upstream job result is
`failure`, `cancelled`, or `skipped`, enabling a single required status
check for branch protection.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
45ecee53a1. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-11 18:55:37 +00:00
renovate[bot]
3b61f05fac
fix(deps): update dependency @actions/cache to v6 (#432)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[@actions/cache](https://redirect.github.com/actions/toolkit/tree/main/packages/cache)
([source](https://redirect.github.com/actions/toolkit/tree/HEAD/packages/cache))
| [`^4.0.0` →
`^6.0.0`](https://renovatebot.com/diffs/npm/@actions%2fcache/4.1.0/6.0.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcache/6.0.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcache/4.1.0/6.0.0?slim=true)
|

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/cache)</summary>

###
[`v6.0.0`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#600)

- **Breaking change**: Package is now ESM-only
- CommonJS consumers must use dynamic `import()` instead of `require()`

###
[`v5.0.5`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#505)

- Bump `@actions/glob` to `0.5.1`

###
[`v5.0.4`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#504)

- Bump `@actions/http-client` to `3.0.2`

###
[`v5.0.3`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#503)

Prevent retries for rate limited cache operations
[2243](https://redirect.github.com/actions/toolkit/pull/2243).

###
[`v5.0.1`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#501)

- Fix Node.js 24 punycode deprecation warning by updating
`@azure/storage-blob` from `^12.13.0` to `^12.29.1`
[#&#8203;2213](https://redirect.github.com/actions/toolkit/pull/2213)
- Newer storage-blob uses `@azure/core-rest-pipeline` instead of
deprecated `@azure/core-http`, which eliminates the transitive
dependency on `node-fetch@2` → `whatwg-url@5` → `tr46@&#8203;0.0.3` that
used the deprecated punycode module

###
[`v5.0.0`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/cache/RELEASES.md#500)

- Remove `@azure/ms-rest-js` dependency
[#&#8203;2197](https://redirect.github.com/actions/toolkit/pull/2197)
- The `TransferProgressEvent` type is now imported from
`@azure/core-rest-pipeline` instead of `@azure/ms-rest-js`
- Bump `@actions/core` from `^1.11.1` to `^2.0.0`
[#&#8203;2198](https://redirect.github.com/actions/toolkit/pull/2198)
- Bump `@actions/exec` from `^1.0.1` to `^2.0.0`
[#&#8203;2198](https://redirect.github.com/actions/toolkit/pull/2198)
- Bump `@actions/glob` from `^0.1.0` to `^0.5.0`
[#&#8203;2198](https://redirect.github.com/actions/toolkit/pull/2198)
- Bump `@actions/http-client` from `^2.1.1` to `^3.0.0`
[#&#8203;2198](https://redirect.github.com/actions/toolkit/pull/2198)
- Bump `@actions/io` from `^1.0.1` to `^2.0.0`
[#&#8203;2198](https://redirect.github.com/actions/toolkit/pull/2198)
- Add support for Node.js 24
[#&#8203;2110](https://redirect.github.com/actions/toolkit/pull/2110)
- Add `node-fetch` override to resolve audit vulnerabilities
[#&#8203;2110](https://redirect.github.com/actions/toolkit/pull/2110)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-11 18:38:18 +00:00
renovate[bot]
6ffba57a54
chore(deps): update dependency typescript to v6 (#428)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [typescript](https://www.typescriptlang.org/)
([source](https://redirect.github.com/microsoft/TypeScript)) | [`^5.7.2`
→ `^6.0.0`](https://renovatebot.com/diffs/npm/typescript/5.9.3/6.0.2) |
![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/6.0.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/5.9.3/6.0.2?slim=true)
|

---

### Release Notes

<details>
<summary>microsoft/TypeScript (typescript)</summary>

###
[`v6.0.2`](https://redirect.github.com/microsoft/TypeScript/compare/v5.9.3...607a22a90d1a5a1b507ce01bb8cd7ec020f954e7)

[Compare
Source](https://redirect.github.com/microsoft/TypeScript/compare/v5.9.3...v6.0.2)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 17:58:42 +00:00
jdx
2a3eb97a03
chore: migrate from ncc (CJS) to rollup (ESM) (#436)
## Summary
- Switch bundler from `@vercel/ncc` to `rollup` with
`@rollup/plugin-commonjs`, `@rollup/plugin-node-resolve`,
`@rollup/plugin-json`, and `@rollup/plugin-typescript`
- Add `"type": "module"` to `package.json` for ESM support
- Upgrade all `@actions/*` dependencies to their latest major versions
(`@actions/core` v3, `@actions/exec` v3, `@actions/cache` v6,
`@actions/glob` v0.6, `@actions/io` v3)
- Remove old ncc artifacts (`dist/licenses.txt`,
`dist/sourcemap-register.js`)

## Why
The `@actions/toolkit` packages v3+ are ESM-only and can't be bundled by
ncc (which uses webpack with CJS `require()`). This is what's blocking
#435 (renovate `@actions/exec` v3 upgrade). The official
`actions/typescript-action` template has already migrated to rollup.

## Test plan
- [ ] CI passes (`npm run all` — format, lint, package)
- [ ] `check-dist` workflow passes (dist/index.js matches build output)
- [ ] Integration tests pass on all platforms (ubuntu, macos, windows,
alpine)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Moderate risk because it changes the action’s build/bundling pipeline
and module format (CJS→ESM), which can break runtime execution or
dependency resolution if the generated `dist/` output differs across
environments.
> 
> **Overview**
> Migrates the GitHub Action build from `@vercel/ncc` (CommonJS) to a
Rollup-based ESM bundle, adding `rollup.config.ts` and updating
TypeScript settings to `NodeNext` to support ESM output.
> 
> Updates `package.json` to `"type": "module"`, switches the packaging
script to Rollup, and upgrades `@actions/*` dependencies to their latest
major (ESM-only) versions. The checked-in `dist/` artifacts are
regenerated accordingly (including license output) and legacy
ncc-specific artifacts are removed.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
59e728e570. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-11 12:55:09 -05:00
renovate[bot]
a25e4af358
chore(deps): update amannn/action-semantic-pull-request action to v6 (#426)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request)
| action | major | `v5` → `v6` |

---

### Release Notes

<details>
<summary>amannn/action-semantic-pull-request
(amannn/action-semantic-pull-request)</summary>

###
[`v6`](https://redirect.github.com/amannn/action-semantic-pull-request/compare/v5...v6)

[Compare
Source](https://redirect.github.com/amannn/action-semantic-pull-request/compare/v5...v6)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 16:08:28 +00:00
renovate[bot]
8b65f8f4d4
chore(deps): update github/codeql-action action to v4 (#430)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | major | `v3` → `v4` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4`](https://redirect.github.com/github/codeql-action/compare/v3...v4)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3...v4)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 15:47:12 +00:00
renovate[bot]
0b79532206
chore(deps): update eslint monorepo to v10 (major) (#429)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@eslint/js](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint/tree/HEAD/packages/js))
| [`^9.15.0` →
`^10.0.0`](https://renovatebot.com/diffs/npm/@eslint%2fjs/9.39.4/10.0.1)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@eslint%2fjs/10.0.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@eslint%2fjs/9.39.4/10.0.1?slim=true)
|
| [eslint](https://eslint.org)
([source](https://redirect.github.com/eslint/eslint)) | [`^9.15.0` →
`^10.0.0`](https://renovatebot.com/diffs/npm/eslint/9.39.4/10.2.0) |
![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/10.2.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/9.39.4/10.2.0?slim=true)
|

---

### Release Notes

<details>
<summary>eslint/eslint (@&#8203;eslint/js)</summary>

###
[`v10.0.1`](https://redirect.github.com/eslint/eslint/compare/v10.0.0...84fb885d49ac810e79a9491276b4828b53d913e5)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.0...v10.0.1)

###
[`v10.0.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.0.0)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.4...v10.0.0)

#### Breaking Changes

-
[`f9e54f4`](f9e54f43a5)
feat!: estimate rule-tester failure location
([#&#8203;20420](https://redirect.github.com/eslint/eslint/issues/20420))
(ST-DDT)
-
[`a176319`](a176319d8a)
feat!: replace `chalk` with `styleText` and add `color` to `ResultsMeta`
([#&#8203;20227](https://redirect.github.com/eslint/eslint/issues/20227))
(루밀LuMir)
-
[`c7046e6`](c7046e6c1e)
feat!: enable JSX reference tracking
([#&#8203;20152](https://redirect.github.com/eslint/eslint/issues/20152))
(Pixel998)
-
[`fa31a60`](fa31a60890)
feat!: add `name` to configs
([#&#8203;20015](https://redirect.github.com/eslint/eslint/issues/20015))
(Kirk Waiblinger)
-
[`3383e7e`](3383e7ec90)
fix!: remove deprecated `SourceCode` methods
([#&#8203;20137](https://redirect.github.com/eslint/eslint/issues/20137))
(Pixel998)
-
[`501abd0`](501abd0e91)
feat!: update dependency minimatch to v10
([#&#8203;20246](https://redirect.github.com/eslint/eslint/issues/20246))
(renovate\[bot])
-
[`ca4d3b4`](ca4d3b4008)
fix!: stricter rule tester assertions for valid test cases
([#&#8203;20125](https://redirect.github.com/eslint/eslint/issues/20125))
(唯然)
-
[`96512a6`](96512a66c8)
fix!: Remove deprecated rule context methods
([#&#8203;20086](https://redirect.github.com/eslint/eslint/issues/20086))
(Nicholas C. Zakas)
-
[`c69fdac`](c69fdacdb2)
feat!: remove eslintrc support
([#&#8203;20037](https://redirect.github.com/eslint/eslint/issues/20037))
(Francesco Trotta)
-
[`208b5cc`](208b5cc34a)
feat!: Use `ScopeManager#addGlobals()`
([#&#8203;20132](https://redirect.github.com/eslint/eslint/issues/20132))
(Milos Djermanovic)
-
[`a2ee188`](a2ee188ea7)
fix!: add `uniqueItems: true` in `no-invalid-regexp` option
([#&#8203;20155](https://redirect.github.com/eslint/eslint/issues/20155))
(Tanuj Kanti)
-
[`a89059d`](a89059dbf2)
feat!: Program range span entire source text
([#&#8203;20133](https://redirect.github.com/eslint/eslint/issues/20133))
(Pixel998)
-
[`39a6424`](39a6424373)
fix!: assert 'text' is a string across all RuleFixer methods
([#&#8203;20082](https://redirect.github.com/eslint/eslint/issues/20082))
(Pixel998)
-
[`f28fbf8`](f28fbf8462)
fix!: Deprecate `"always"` and `"as-needed"` options of the `radix` rule
([#&#8203;20223](https://redirect.github.com/eslint/eslint/issues/20223))
(Milos Djermanovic)
-
[`aa3fb2b`](aa3fb2b233)
fix!: tighten `func-names` schema
([#&#8203;20119](https://redirect.github.com/eslint/eslint/issues/20119))
(Pixel998)
-
[`f6c0ed0`](f6c0ed0311)
feat!: report `eslint-env` comments as errors
([#&#8203;20128](https://redirect.github.com/eslint/eslint/issues/20128))
(Francesco Trotta)
-
[`4bf739f`](4bf739fb53)
fix!: remove deprecated `LintMessage#nodeType` and `TestCaseError#type`
([#&#8203;20096](https://redirect.github.com/eslint/eslint/issues/20096))
(Pixel998)
-
[`523c076`](523c076866)
feat!: drop support for jiti < 2.2.0
([#&#8203;20016](https://redirect.github.com/eslint/eslint/issues/20016))
(michael faith)
-
[`454a292`](454a292c95)
feat!: update `eslint:recommended` configuration
([#&#8203;20210](https://redirect.github.com/eslint/eslint/issues/20210))
(Pixel998)
-
[`4f880ee`](4f880ee029)
feat!: remove `v10_*` and inactive `unstable_*` flags
([#&#8203;20225](https://redirect.github.com/eslint/eslint/issues/20225))
(sethamus)
-
[`f18115c`](f18115c363)
feat!: `no-shadow-restricted-names` report `globalThis` by default
([#&#8203;20027](https://redirect.github.com/eslint/eslint/issues/20027))
(sethamus)
-
[`c6358c3`](c6358c31fb)
feat!: Require Node.js `^20.19.0 || ^22.13.0 || >=24`
([#&#8203;20160](https://redirect.github.com/eslint/eslint/issues/20160))
(Milos Djermanovic)

#### Features

-
[`bff9091`](bff9091927)
feat: handle `Array.fromAsync` in `array-callback-return`
([#&#8203;20457](https://redirect.github.com/eslint/eslint/issues/20457))
(Francesco Trotta)
-
[`290c594`](290c594bb5)
feat: add `self` to `no-implied-eval` rule
([#&#8203;20468](https://redirect.github.com/eslint/eslint/issues/20468))
(sethamus)
-
[`43677de`](43677de07e)
feat: fix handling of function and class expression names in `no-shadow`
([#&#8203;20432](https://redirect.github.com/eslint/eslint/issues/20432))
(Milos Djermanovic)
-
[`f0cafe5`](f0cafe5f37)
feat: rule tester add assertion option `requireData`
([#&#8203;20409](https://redirect.github.com/eslint/eslint/issues/20409))
(fnx)
-
[`f7ab693`](f7ab6937e6)
feat: output RuleTester test case failure index
([#&#8203;19976](https://redirect.github.com/eslint/eslint/issues/19976))
(ST-DDT)
-
[`7cbcbf9`](7cbcbf9c3c)
feat: add `countThis` option to `max-params`
([#&#8203;20236](https://redirect.github.com/eslint/eslint/issues/20236))
(Gerkin)
-
[`f148a5e`](f148a5eaa1)
feat: add error assertion options
([#&#8203;20247](https://redirect.github.com/eslint/eslint/issues/20247))
(ST-DDT)
-
[`09e6654`](09e66549ec)
feat: update error loc of `require-yield` and `no-useless-constructor`
([#&#8203;20267](https://redirect.github.com/eslint/eslint/issues/20267))
(Tanuj Kanti)

#### Bug Fixes

-
[`436b82f`](436b82f3c0)
fix: update eslint
([#&#8203;20473](https://redirect.github.com/eslint/eslint/issues/20473))
(renovate\[bot])
-
[`1d29d22`](1d29d22fe3)
fix: detect default `this` binding in `Array.fromAsync` callbacks
([#&#8203;20456](https://redirect.github.com/eslint/eslint/issues/20456))
(Francesco Trotta)
-
[`727451e`](727451eff5)
fix: fix regression of global mode report range in `strict` rule
([#&#8203;20462](https://redirect.github.com/eslint/eslint/issues/20462))
(ntnyq)
-
[`e80485f`](e80485fcd2)
fix: remove fake `FlatESLint` and `LegacyESLint` exports
([#&#8203;20460](https://redirect.github.com/eslint/eslint/issues/20460))
(Francesco Trotta)
-
[`9eeff3b`](9eeff3bc13)
fix: update esquery
([#&#8203;20423](https://redirect.github.com/eslint/eslint/issues/20423))
(cryptnix)
-
[`b34b938`](b34b93852d)
fix: use `Error.prepareStackTrace` to estimate failing test location
([#&#8203;20436](https://redirect.github.com/eslint/eslint/issues/20436))
(Francesco Trotta)
-
[`51aab53`](51aab5393b)
fix: update eslint
([#&#8203;20443](https://redirect.github.com/eslint/eslint/issues/20443))
(renovate\[bot])
-
[`23490b2`](23490b2662)
fix: handle space before colon in `RuleTester` location estimation
([#&#8203;20433](https://redirect.github.com/eslint/eslint/issues/20433))
(Francesco Trotta)
-
[`f244dbf`](f244dbf219)
fix: use `MessagePlaceholderData` type from `@eslint/core`
([#&#8203;20348](https://redirect.github.com/eslint/eslint/issues/20348))
(루밀LuMir)
-
[`d186f8c`](d186f8c074)
fix: update eslint
([#&#8203;20427](https://redirect.github.com/eslint/eslint/issues/20427))
(renovate\[bot])
-
[`2332262`](2332262deb)
fix: error location should not modify error message in RuleTester
([#&#8203;20421](https://redirect.github.com/eslint/eslint/issues/20421))
(Milos Djermanovic)
-
[`ab99b21`](ab99b21a67)
fix: ensure `filename` is passed as third argument to `verifyAndFix()`
([#&#8203;20405](https://redirect.github.com/eslint/eslint/issues/20405))
(루밀LuMir)
-
[`8a60f3b`](8a60f3bc80)
fix: remove `ecmaVersion` and `sourceType` from `ParserOptions` type
([#&#8203;20415](https://redirect.github.com/eslint/eslint/issues/20415))
(Pixel998)
-
[`eafd727`](eafd727a06)
fix: remove `TDZ` scope type
([#&#8203;20231](https://redirect.github.com/eslint/eslint/issues/20231))
(jaymarvelz)
-
[`39d1f51`](39d1f51680)
fix: correct `Scope` typings
([#&#8203;20404](https://redirect.github.com/eslint/eslint/issues/20404))
(sethamus)
-
[`2bd0f13`](2bd0f13a92)
fix: update `verify` and `verifyAndFix` types
([#&#8203;20384](https://redirect.github.com/eslint/eslint/issues/20384))
(Francesco Trotta)
-
[`ba6ebfa`](ba6ebfa78d)
fix: correct typings for `loadESLint()` and `shouldUseFlatConfig()`
([#&#8203;20393](https://redirect.github.com/eslint/eslint/issues/20393))
(루밀LuMir)
-
[`e7673ae`](e7673ae096)
fix: correct RuleTester typings
([#&#8203;20105](https://redirect.github.com/eslint/eslint/issues/20105))
(Pixel998)
-
[`53e9522`](53e95222af)
fix: strict removed formatters check
([#&#8203;20241](https://redirect.github.com/eslint/eslint/issues/20241))
(ntnyq)
-
[`b017f09`](b017f094d4)
fix: correct `no-restricted-import` messages
([#&#8203;20374](https://redirect.github.com/eslint/eslint/issues/20374))
(Francesco Trotta)

#### Documentation

-
[`e978dda`](e978ddaab7)
docs: Update README (GitHub Actions Bot)
-
[`4cecf83`](4cecf8393a)
docs: Update README (GitHub Actions Bot)
-
[`c79f0ab`](c79f0ab2e2)
docs: Update README (GitHub Actions Bot)
-
[`773c052`](773c0527c7)
docs: Update README (GitHub Actions Bot)
-
[`f2962e4`](f2962e46a0)
docs: document `meta.docs.frozen` property
([#&#8203;20475](https://redirect.github.com/eslint/eslint/issues/20475))
(Pixel998)
-
[`8e94f58`](8e94f58beb)
docs: fix broken anchor links from gerund heading updates
([#&#8203;20449](https://redirect.github.com/eslint/eslint/issues/20449))
(Copilot)
-
[`1495654`](14956543d4)
docs: Update README (GitHub Actions Bot)
-
[`0b8ed5c`](0b8ed5c0aa)
docs: document support for `:is` selector alias
([#&#8203;20454](https://redirect.github.com/eslint/eslint/issues/20454))
(sethamus)
-
[`1c4b33f`](1c4b33fe86)
docs: Document policies about ESM-only dependencies
([#&#8203;20448](https://redirect.github.com/eslint/eslint/issues/20448))
(Milos Djermanovic)
-
[`3e5d38c`](3e5d38cdd5)
docs: add missing indentation space in rule example
([#&#8203;20446](https://redirect.github.com/eslint/eslint/issues/20446))
(fnx)
-
[`63a0c7c`](63a0c7c84b)
docs: Update README (GitHub Actions Bot)
-
[`65ed0c9`](65ed0c94e7)
docs: Update README (GitHub Actions Bot)
-
[`b0e4717`](b0e4717d66)
docs: \[no-await-in-loop] Expand inapplicability
([#&#8203;20363](https://redirect.github.com/eslint/eslint/issues/20363))
(Niklas Hambüchen)
-
[`fca421f`](fca421f6a4)
docs: Update README (GitHub Actions Bot)
-
[`d925c54`](d925c54f04)
docs: update config syntax in `no-lone-blocks`
([#&#8203;20413](https://redirect.github.com/eslint/eslint/issues/20413))
(Pixel998)
-
[`7d5c95f`](7d5c95f281)
docs: remove redundant `sourceType: "module"` from rule examples
([#&#8203;20412](https://redirect.github.com/eslint/eslint/issues/20412))
(Pixel998)
-
[`02e7e71`](02e7e71263)
docs: correct `.mts` glob pattern in files with extensions example
([#&#8203;20403](https://redirect.github.com/eslint/eslint/issues/20403))
(Ali Essalihi)
-
[`264b981`](264b981101)
docs: Update README (GitHub Actions Bot)
-
[`5a4324f`](5a4324f38e)
docs: clarify `"local"` option of `no-unused-vars`
([#&#8203;20385](https://redirect.github.com/eslint/eslint/issues/20385))
(Milos Djermanovic)
-
[`e593aa0`](e593aa0fd2)
docs: improve clarity, grammar, and wording in documentation site README
([#&#8203;20370](https://redirect.github.com/eslint/eslint/issues/20370))
(Aditya)
-
[`3f5062e`](3f5062ed5f)
docs: Add messages property to rule meta documentation
([#&#8203;20361](https://redirect.github.com/eslint/eslint/issues/20361))
(Sabya Sachi)
-
[`9e5a5c2`](9e5a5c2b6b)
docs: remove `Examples` headings from rule docs
([#&#8203;20364](https://redirect.github.com/eslint/eslint/issues/20364))
(Milos Djermanovic)
-
[`194f488`](194f488a8d)
docs: Update README (GitHub Actions Bot)
-
[`0f5a94a`](0f5a94a84b)
docs: \[class-methods-use-this] explain purpose of rule
([#&#8203;20008](https://redirect.github.com/eslint/eslint/issues/20008))
(Kirk Waiblinger)
-
[`df5566f`](df5566f826)
docs: add Options section to all rule docs
([#&#8203;20296](https://redirect.github.com/eslint/eslint/issues/20296))
(sethamus)
-
[`adf7a2b`](adf7a2b202)
docs: no-unsafe-finally note for generator functions
([#&#8203;20330](https://redirect.github.com/eslint/eslint/issues/20330))
(Tom Pereira)
-
[`ef7028c`](ef7028c968)
docs: Update README (GitHub Actions Bot)
-
[`fbae5d1`](fbae5d1885)
docs: consistently use "v10.0.0" in migration guide
([#&#8203;20328](https://redirect.github.com/eslint/eslint/issues/20328))
(Pixel998)
-
[`778aa2d`](778aa2d83e)
docs: ignoring default file patterns
([#&#8203;20312](https://redirect.github.com/eslint/eslint/issues/20312))
(Tanuj Kanti)
-
[`4b5dbcd`](4b5dbcdae5)
docs: reorder v10 migration guide
([#&#8203;20315](https://redirect.github.com/eslint/eslint/issues/20315))
(Milos Djermanovic)
-
[`5d84a73`](5d84a7371d)
docs: Update README (GitHub Actions Bot)
-
[`37c8863`](37c8863088)
docs: fix incorrect anchor link in v10 migration guide
([#&#8203;20299](https://redirect.github.com/eslint/eslint/issues/20299))
(Pixel998)
-
[`077ff02`](077ff028b6)
docs: add migrate-to-10.0.0 doc
([#&#8203;20143](https://redirect.github.com/eslint/eslint/issues/20143))
(唯然)
-
[`3822e1b`](3822e1b768)
docs: Update README (GitHub Actions Bot)

#### Build Related

-
[`9f08712`](9f0871236e)
Build: changelog update for 10.0.0-rc.2 (Jenkins)
-
[`1e2c449`](1e2c449701)
Build: changelog update for 10.0.0-rc.1 (Jenkins)
-
[`c4c72a8`](c4c72a8d99)
Build: changelog update for 10.0.0-rc.0 (Jenkins)
-
[`7e4daf9`](7e4daf93d2)
Build: changelog update for 10.0.0-beta.0 (Jenkins)
-
[`a126a2a`](a126a2ab13)
build: add .scss files entry to knip
([#&#8203;20389](https://redirect.github.com/eslint/eslint/issues/20389))
(Francesco Trotta)
-
[`f5c0193`](f5c01932f6)
Build: changelog update for 10.0.0-alpha.1 (Jenkins)
-
[`165326f`](165326f046)
Build: changelog update for 10.0.0-alpha.0 (Jenkins)

#### Chores

-
[`1ece282`](1ece282c22)
chore: ignore `/docs/v9.x` in link checker
([#&#8203;20452](https://redirect.github.com/eslint/eslint/issues/20452))
(Milos Djermanovic)
-
[`034e139`](034e139744)
ci: add type integration test for `@html-eslint/eslint-plugin`
([#&#8203;20345](https://redirect.github.com/eslint/eslint/issues/20345))
(sethamus)
-
[`f3fbc2f`](f3fbc2f60c)
chore: set `@eslint/js` version to 10.0.0 to skip releasing it
([#&#8203;20466](https://redirect.github.com/eslint/eslint/issues/20466))
(Milos Djermanovic)
-
[`afc0681`](afc06817bb)
chore: remove scopeManager.addGlobals patch for typescript-eslint parser
([#&#8203;20461](https://redirect.github.com/eslint/eslint/issues/20461))
(fnx)
-
[`3e5a173`](3e5a173053)
refactor: use types from `@eslint/plugin-kit`
([#&#8203;20435](https://redirect.github.com/eslint/eslint/issues/20435))
(Pixel998)
-
[`11644b1`](11644b1dc2)
ci: rename workflows
([#&#8203;20463](https://redirect.github.com/eslint/eslint/issues/20463))
(Milos Djermanovic)
-
[`2d14173`](2d14173729)
chore: fix typos in docs and comments
([#&#8203;20458](https://redirect.github.com/eslint/eslint/issues/20458))
(o-m12a)
-
[`6742f92`](6742f927ba)
test: add endLine/endColumn to invalid test case in no-alert
([#&#8203;20441](https://redirect.github.com/eslint/eslint/issues/20441))
(경하)
-
[`3e22c82`](3e22c82a87)
test: add missing location data to no-template-curly-in-string tests
([#&#8203;20440](https://redirect.github.com/eslint/eslint/issues/20440))
(Haeun Kim)
-
[`b4b3127`](b4b3127f85)
chore: package.json update for
[@&#8203;eslint/js](https://redirect.github.com/eslint/js) release
(Jenkins)
-
[`f658419`](f6584191cb)
refactor: remove `raw` parser option from JS language
([#&#8203;20416](https://redirect.github.com/eslint/eslint/issues/20416))
(Pixel998)
-
[`2c3efb7`](2c3efb728b)
chore: remove `category` from type test fixtures
([#&#8203;20417](https://redirect.github.com/eslint/eslint/issues/20417))
(Pixel998)
-
[`36193fd`](36193fd9ad)
chore: remove `category` from formatter test fixtures
([#&#8203;20418](https://redirect.github.com/eslint/eslint/issues/20418))
(Pixel998)
-
[`e8d203b`](e8d203b0d9)
chore: add JSX language tag validation to `check-rule-examples`
([#&#8203;20414](https://redirect.github.com/eslint/eslint/issues/20414))
(Pixel998)
-
[`bc465a1`](bc465a1e9d)
chore: pin dependencies
([#&#8203;20397](https://redirect.github.com/eslint/eslint/issues/20397))
(renovate\[bot])
-
[`703f0f5`](703f0f551d)
test: replace deprecated rules in `linter` tests
([#&#8203;20406](https://redirect.github.com/eslint/eslint/issues/20406))
(루밀LuMir)
-
[`ba71baa`](ba71baa872)
test: enable `strict` mode in type tests
([#&#8203;20398](https://redirect.github.com/eslint/eslint/issues/20398))
(루밀LuMir)
-
[`f9c4968`](f9c49683a6)
refactor: remove `lib/linter/rules.js`
([#&#8203;20399](https://redirect.github.com/eslint/eslint/issues/20399))
(Francesco Trotta)
-
[`6f1c48e`](6f1c48e5e7)
chore: updates for v9.39.2 release (Jenkins)
-
[`54bf0a3`](54bf0a3646)
ci: create package manager test
([#&#8203;20392](https://redirect.github.com/eslint/eslint/issues/20392))
(루밀LuMir)
-
[`3115021`](3115021439)
refactor: simplify JSDoc comment detection logic
([#&#8203;20360](https://redirect.github.com/eslint/eslint/issues/20360))
(Pixel998)
-
[`4345b17`](4345b172a8)
chore: update `@eslint-community/regexpp` to `4.12.2`
([#&#8203;20366](https://redirect.github.com/eslint/eslint/issues/20366))
(루밀LuMir)
-
[`772c9ee`](772c9ee9b6)
chore: update dependency
[@&#8203;eslint/eslintrc](https://redirect.github.com/eslint/eslintrc)
to ^3.3.3
([#&#8203;20359](https://redirect.github.com/eslint/eslint/issues/20359))
(renovate\[bot])
-
[`0b14059`](0b14059491)
chore: package.json update for
[@&#8203;eslint/js](https://redirect.github.com/eslint/js) release
(Jenkins)
-
[`d6e7bf3`](d6e7bf3064)
ci: bump actions/checkout from 5 to 6
([#&#8203;20350](https://redirect.github.com/eslint/eslint/issues/20350))
(dependabot\[bot])
-
[`139d456`](139d4567d4)
chore: require mandatory headers in rule docs
([#&#8203;20347](https://redirect.github.com/eslint/eslint/issues/20347))
(Milos Djermanovic)
-
[`3b0289c`](3b0289c7b6)
chore: remove unused `.eslintignore` and test fixtures
([#&#8203;20316](https://redirect.github.com/eslint/eslint/issues/20316))
(Pixel998)
-
[`a463e7b`](a463e7bea0)
chore: update dependency js-yaml to v4 \[security]
([#&#8203;20319](https://redirect.github.com/eslint/eslint/issues/20319))
(renovate\[bot])
-
[`ebfe905`](ebfe90533d)
chore: remove redundant rules from eslint-config-eslint
([#&#8203;20327](https://redirect.github.com/eslint/eslint/issues/20327))
(Milos Djermanovic)
-
[`88dfdb2`](88dfdb23ee)
test: add regression tests for message placeholder interpolation
([#&#8203;20318](https://redirect.github.com/eslint/eslint/issues/20318))
(fnx)
-
[`6ed0f75`](6ed0f758ff)
chore: skip type checking in `eslint-config-eslint`
([#&#8203;20323](https://redirect.github.com/eslint/eslint/issues/20323))
(Francesco Trotta)
-
[`1e2cad5`](1e2cad5f6f)
chore: package.json update for
[@&#8203;eslint/js](https://redirect.github.com/eslint/js) release
(Jenkins)
-
[`9da2679`](9da2679848)
chore: update `@eslint/*` dependencies
([#&#8203;20321](https://redirect.github.com/eslint/eslint/issues/20321))
(Milos Djermanovic)
-
[`0439794`](0439794181)
refactor: use types from
[@&#8203;eslint/core](https://redirect.github.com/eslint/core)
([#&#8203;20235](https://redirect.github.com/eslint/eslint/issues/20235))
(jaymarvelz)
-
[`cb51ec2`](cb51ec2d6d)
test: cleanup `SourceCode#traverse` tests
([#&#8203;20289](https://redirect.github.com/eslint/eslint/issues/20289))
(Milos Djermanovic)
-
[`897a347`](897a3471d6)
chore: remove restriction for `type` in rule tests
([#&#8203;20305](https://redirect.github.com/eslint/eslint/issues/20305))
(Pixel998)
-
[`d972098`](d972098857)
chore: ignore prettier updates in renovate to keep in sync with trunk
([#&#8203;20304](https://redirect.github.com/eslint/eslint/issues/20304))
(Pixel998)
-
[`a086359`](a086359387)
chore: remove redundant `fast-glob` dev-dependency
([#&#8203;20301](https://redirect.github.com/eslint/eslint/issues/20301))
(루밀LuMir)
-
[`564b302`](564b30215c)
chore: install `prettier` as a dev dependency
([#&#8203;20302](https://redirect.github.com/eslint/eslint/issues/20302))
(michael faith)
-
[`8257b57`](8257b5729d)
refactor: correct regex for `eslint-plugin/report-message-format`
([#&#8203;20300](https://redirect.github.com/eslint/eslint/issues/20300))
(루밀LuMir)
-
[`e251671`](e2516713bc)
refactor: extract assertions in RuleTester
([#&#8203;20135](https://redirect.github.com/eslint/eslint/issues/20135))
(唯然)
-
[`2e7f25e`](2e7f25e189)
chore: add `legacy-peer-deps` to `.npmrc`
([#&#8203;20281](https://redirect.github.com/eslint/eslint/issues/20281))
(Milos Djermanovic)
-
[`39c638a`](39c638a9ae)
chore: update eslint-config-eslint dependencies for v10 prereleases
([#&#8203;20278](https://redirect.github.com/eslint/eslint/issues/20278))
(Milos Djermanovic)
-
[`8533b3f`](8533b3fa28)
chore: update dependency
[@&#8203;eslint/json](https://redirect.github.com/eslint/json) to
^0.14.0
([#&#8203;20288](https://redirect.github.com/eslint/eslint/issues/20288))
(renovate\[bot])
-
[`796ddf6`](796ddf6db5)
chore: update dependency
[@&#8203;eslint/js](https://redirect.github.com/eslint/js) to ^9.39.1
([#&#8203;20285](https://redirect.github.com/eslint/eslint/issues/20285))
(renovate\[bot])

</details>

<details>
<summary>eslint/eslint (eslint)</summary>

###
[`v10.2.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.2.0)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.1.0...v10.2.0)

#### Features

-
[`586ec2f`](586ec2f430)
feat: Add `meta.languages` support to rules
([#&#8203;20571](https://redirect.github.com/eslint/eslint/issues/20571))
(Copilot)
-
[`14207de`](14207dee39)
feat: add `Temporal` to `no-obj-calls`
([#&#8203;20675](https://redirect.github.com/eslint/eslint/issues/20675))
(Pixel998)
-
[`bbb2c93`](bbb2c93a2b)
feat: add Temporal to ES2026 globals
([#&#8203;20672](https://redirect.github.com/eslint/eslint/issues/20672))
(Pixel998)

#### Bug Fixes

-
[`542cb3e`](542cb3e644)
fix: update first-party dependencies
([#&#8203;20714](https://redirect.github.com/eslint/eslint/issues/20714))
(Francesco Trotta)

#### Documentation

-
[`a2af743`](a2af743ea6)
docs: add `language` to configuration objects
([#&#8203;20712](https://redirect.github.com/eslint/eslint/issues/20712))
(Francesco Trotta)
-
[`845f23f`](845f23f137)
docs: Update README (GitHub Actions Bot)
-
[`5fbcf59`](5fbcf5958b)
docs: remove `sourceType` from ts playground link
([#&#8203;20477](https://redirect.github.com/eslint/eslint/issues/20477))
(Tanuj Kanti)
-
[`8702a47`](8702a47465)
docs: Update README (GitHub Actions Bot)
-
[`ddeaded`](ddeaded2ab)
docs: Update README (GitHub Actions Bot)
-
[`2b44966`](2b44966912)
docs: add Major Releases section to Manage Releases
([#&#8203;20269](https://redirect.github.com/eslint/eslint/issues/20269))
(Milos Djermanovic)
-
[`eab65c7`](eab65c700e)
docs: update `eslint` versions in examples
([#&#8203;20664](https://redirect.github.com/eslint/eslint/issues/20664))
(루밀LuMir)
-
[`3e4a299`](3e4a29903b)
docs: update ESM Dependencies policies with note for own-usage packages
([#&#8203;20660](https://redirect.github.com/eslint/eslint/issues/20660))
(Milos Djermanovic)

#### Chores

-
[`8120e30`](8120e30f83)
refactor: extract no unmodified loop condition
([#&#8203;20679](https://redirect.github.com/eslint/eslint/issues/20679))
(kuldeep kumar)
-
[`46e8469`](46e8469786)
chore: update dependency markdownlint-cli2 to ^0.22.0
([#&#8203;20697](https://redirect.github.com/eslint/eslint/issues/20697))
(renovate\[bot])
-
[`01ed3aa`](01ed3aa684)
test: add unit tests for unicode utilities
([#&#8203;20622](https://redirect.github.com/eslint/eslint/issues/20622))
(Manish chaudhary)
-
[`811f493`](811f4930f8)
ci: remove `--legacy-peer-deps` from types integration tests
([#&#8203;20667](https://redirect.github.com/eslint/eslint/issues/20667))
(Milos Djermanovic)
-
[`6b86fcf`](6b86fcfc5c)
chore: update dependency npm-run-all2 to v8
([#&#8203;20663](https://redirect.github.com/eslint/eslint/issues/20663))
(renovate\[bot])
-
[`632c4f8`](632c4f83bf)
chore: add `prettier` update commit to `.git-blame-ignore-revs`
([#&#8203;20662](https://redirect.github.com/eslint/eslint/issues/20662))
(루밀LuMir)
-
[`b0b0f21`](b0b0f21927)
chore: update dependency eslint-plugin-regexp to ^3.1.0
([#&#8203;20659](https://redirect.github.com/eslint/eslint/issues/20659))
(Milos Djermanovic)
-
[`228a2dd`](228a2dd4b2)
chore: update dependency eslint-plugin-eslint-plugin to ^7.3.2
([#&#8203;20661](https://redirect.github.com/eslint/eslint/issues/20661))
(Milos Djermanovic)
-
[`3ab4d7e`](3ab4d7e244)
test: Add tests for eslintrc-style keys
([#&#8203;20645](https://redirect.github.com/eslint/eslint/issues/20645))
(kuldeep kumar)

###
[`v10.1.0`](https://redirect.github.com/eslint/eslint/releases/tag/v10.1.0)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.3...v10.1.0)

#### Features

-
[`ff4382b`](ff4382be34)
feat: apply fix for `no-var` in `TSModuleBlock`
([#&#8203;20638](https://redirect.github.com/eslint/eslint/issues/20638))
(Tanuj Kanti)
-
[`0916995`](0916995b51)
feat: Implement api support for bulk-suppressions
([#&#8203;20565](https://redirect.github.com/eslint/eslint/issues/20565))
(Blake Sager)

#### Bug Fixes

-
[`2b8824e`](2b8824e6be)
fix: Prevent `no-var` autofix when a variable is used before declaration
([#&#8203;20464](https://redirect.github.com/eslint/eslint/issues/20464))
(Amaresh S M)
-
[`e58b4bf`](e58b4bff16)
fix: update eslint
([#&#8203;20597](https://redirect.github.com/eslint/eslint/issues/20597))
(renovate\[bot])

#### Documentation

-
[`b7b57fe`](b7b57fe994)
docs: use correct JSDoc link in require-jsdoc.md
([#&#8203;20641](https://redirect.github.com/eslint/eslint/issues/20641))
(mkemna-clb)
-
[`58e4cfc`](58e4cfc7db)
docs: add deprecation notice partial
([#&#8203;20639](https://redirect.github.com/eslint/eslint/issues/20639))
(Milos Djermanovic)
-
[`7143dbf`](7143dbf99d)
docs: update v9 migration guide for `@eslint/js` usage
([#&#8203;20540](https://redirect.github.com/eslint/eslint/issues/20540))
(fnx)
-
[`035fc4f`](035fc4fbe5)
docs: note that `globalReturn` applies only with `sourceType: "script"`
([#&#8203;20630](https://redirect.github.com/eslint/eslint/issues/20630))
(Milos Djermanovic)
-
[`e972c88`](e972c88ab7)
docs: merge ESLint option descriptions into type definitions
([#&#8203;20608](https://redirect.github.com/eslint/eslint/issues/20608))
(Francesco Trotta)
-
[`7f10d84`](7f10d84401)
docs: Update README (GitHub Actions Bot)
-
[`aeed007`](aeed0078ca)
docs: open playground link in new tab
([#&#8203;20602](https://redirect.github.com/eslint/eslint/issues/20602))
(Tanuj Kanti)
-
[`a0d1a37`](a0d1a37726)
docs: Add AI Usage Policy
([#&#8203;20510](https://redirect.github.com/eslint/eslint/issues/20510))
(Nicholas C. Zakas)

#### Chores

-
[`a9f9cce`](a9f9cce82d)
chore: update dependency eslint-plugin-unicorn to ^63.0.0
([#&#8203;20584](https://redirect.github.com/eslint/eslint/issues/20584))
(Milos Djermanovic)
-
[`1f42bd7`](1f42bd7876)
chore: update `prettier` to 3.8.1
([#&#8203;20651](https://redirect.github.com/eslint/eslint/issues/20651))
(루밀LuMir)
-
[`c0a6f4a`](c0a6f4a2b4)
chore: update dependency
[@&#8203;eslint/json](https://redirect.github.com/eslint/json) to ^1.2.0
([#&#8203;20652](https://redirect.github.com/eslint/eslint/issues/20652))
(renovate\[bot])
-
[`cc43f79`](cc43f795c4)
chore: update dependency c8 to v11
([#&#8203;20650](https://redirect.github.com/eslint/eslint/issues/20650))
(renovate\[bot])
-
[`2ce4635`](2ce4635b03)
chore: update dependency
[@&#8203;eslint/json](https://redirect.github.com/eslint/json) to v1
([#&#8203;20649](https://redirect.github.com/eslint/eslint/issues/20649))
(renovate\[bot])
-
[`f0406ee`](f0406eedcc)
chore: update dependency markdownlint-cli2 to ^0.21.0
([#&#8203;20646](https://redirect.github.com/eslint/eslint/issues/20646))
(renovate\[bot])
-
[`dbb4c95`](dbb4c9582a)
chore: remove trunk
([#&#8203;20478](https://redirect.github.com/eslint/eslint/issues/20478))
(sethamus)
-
[`c672a2a`](c672a2a705)
test: fix CLI test for empty output file
([#&#8203;20640](https://redirect.github.com/eslint/eslint/issues/20640))
(kuldeep kumar)
-
[`c7ada24`](c7ada24556)
ci: bump pnpm/action-setup from 4.3.0 to 4.4.0
([#&#8203;20636](https://redirect.github.com/eslint/eslint/issues/20636))
(dependabot\[bot])
-
[`07c4b8b`](07c4b8b4a9)
test: fix `RuleTester` test without test runners
([#&#8203;20631](https://redirect.github.com/eslint/eslint/issues/20631))
(Francesco Trotta)
-
[`079bba7`](079bba7ff1)
test: Add tests for `isValidWithUnicodeFlag`
([#&#8203;20601](https://redirect.github.com/eslint/eslint/issues/20601))
(Manish chaudhary)
-
[`5885ae6`](5885ae6621)
ci: unpin Node.js 25.x in CI
([#&#8203;20615](https://redirect.github.com/eslint/eslint/issues/20615))
(Copilot)
-
[`f65e5d3`](f65e5d3c0d)
chore: update pnpm/action-setup digest to
[`b906aff`](b906aff)
([#&#8203;20610](https://redirect.github.com/eslint/eslint/issues/20610))
(renovate\[bot])

###
[`v10.0.3`](https://redirect.github.com/eslint/eslint/compare/v10.0.2...bfce7eaa0ec5d6591fd247b7ff57b51e45fb88a1)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.2...v10.0.3)

###
[`v10.0.2`](https://redirect.github.com/eslint/eslint/compare/v10.0.1...55122d6f971119607c85b0df8e62942171c939f7)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.1...v10.0.2)

###
[`v10.0.1`](https://redirect.github.com/eslint/eslint/releases/tag/v10.0.1)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v10.0.0...v10.0.1)

#### Bug Fixes

-
[`c87d5bd`](c87d5bded5)
fix: update eslint
([#&#8203;20531](https://redirect.github.com/eslint/eslint/issues/20531))
(renovate\[bot])
-
[`d841001`](d84100115c)
fix: update `minimatch` to `10.2.1` to address security vulnerabilities
([#&#8203;20519](https://redirect.github.com/eslint/eslint/issues/20519))
(루밀LuMir)
-
[`04c2147`](04c21475b3)
fix: update error message for unused suppressions
([#&#8203;20496](https://redirect.github.com/eslint/eslint/issues/20496))
(fnx)
-
[`38b089c`](38b089c172)
fix: update dependency
[@&#8203;eslint/config-array](https://redirect.github.com/eslint/config-array)
to ^0.23.1
([#&#8203;20484](https://redirect.github.com/eslint/eslint/issues/20484))
(renovate\[bot])

#### Documentation

-
[`5b3dbce`](5b3dbce50a)
docs: add AI acknowledgement section to templates
([#&#8203;20431](https://redirect.github.com/eslint/eslint/issues/20431))
(루밀LuMir)
-
[`6f23076`](6f23076037)
docs: toggle nav in no-JS mode
([#&#8203;20476](https://redirect.github.com/eslint/eslint/issues/20476))
(Tanuj Kanti)
-
[`b69cfb3`](b69cfb32a1)
docs: Update README (GitHub Actions Bot)

#### Chores

-
[`e5c281f`](e5c281ffd0)
chore: updates for v9.39.3 release (Jenkins)
-
[`8c3832a`](8c3832adb7)
chore: update
[@&#8203;typescript-eslint/parser](https://redirect.github.com/typescript-eslint/parser)
to ^8.56.0
([#&#8203;20514](https://redirect.github.com/eslint/eslint/issues/20514))
(Milos Djermanovic)
-
[`8330d23`](8330d238ae)
test: add tests for config-api
([#&#8203;20493](https://redirect.github.com/eslint/eslint/issues/20493))
(Milos Djermanovic)
-
[`37d6e91`](37d6e91e88)
chore: remove eslint v10 prereleases from eslint-config-eslint deps
([#&#8203;20494](https://redirect.github.com/eslint/eslint/issues/20494))
(Milos Djermanovic)
-
[`da7cd0e`](da7cd0e791)
refactor: cleanup error message templates
([#&#8203;20479](https://redirect.github.com/eslint/eslint/issues/20479))
(Francesco Trotta)
-
[`84fb885`](84fb885d49)
chore: package.json update for
[@&#8203;eslint/js](https://redirect.github.com/eslint/js) release
(Jenkins)
-
[`1f66734`](1f667344b5)
chore: add `eslint` to `peerDependencies` of `@eslint/js`
([#&#8203;20467](https://redirect.github.com/eslint/eslint/issues/20467))
(Milos Djermanovic)

###
[`v10.0.0`](https://redirect.github.com/eslint/eslint/compare/v9.39.2...4e6c4ac042e321da8fc29ce53ed03c86dcaa44a7)

[Compare
Source](https://redirect.github.com/eslint/eslint/compare/v9.39.4...v10.0.0)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 15:41:37 +00:00
renovate[bot]
5dd08e1290
chore(deps): update dependency globals to v17 (#427)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [globals](https://redirect.github.com/sindresorhus/globals) |
[`^16.0.0` →
`^17.0.0`](https://renovatebot.com/diffs/npm/globals/16.5.0/17.4.0) |
![age](https://developer.mend.io/api/mc/badges/age/npm/globals/17.4.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/globals/16.5.0/17.4.0?slim=true)
|

---

### Release Notes

<details>
<summary>sindresorhus/globals (globals)</summary>

###
[`v17.4.0`](https://redirect.github.com/sindresorhus/globals/compare/v17.3.0...a9cfd7493fb701474d4dc946283c7b9d63d64134)

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.3.0...v17.4.0)

###
[`v17.3.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.3.0)

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.2.0...v17.3.0)

- Update globals (2026-02-01)
([#&#8203;336](https://redirect.github.com/sindresorhus/globals/issues/336))
[`295fba9`](295fba9)

***

###
[`v17.2.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.2.0)

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.1.0...v17.2.0)

- `jasmine`: Add `throwUnless` and `throwUnlessAsync` globals
([#&#8203;335](https://redirect.github.com/sindresorhus/globals/issues/335))
[`97f23a7`](97f23a7)

***

###
[`v17.1.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.1.0)

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v17.0.0...v17.1.0)

- Add `webpack` and `rspack` globals
([#&#8203;333](https://redirect.github.com/sindresorhus/globals/issues/333))
[`65cae73`](65cae73)

***

###
[`v17.0.0`](https://redirect.github.com/sindresorhus/globals/releases/tag/v17.0.0)

[Compare
Source](https://redirect.github.com/sindresorhus/globals/compare/v16.5.0...v17.0.0)

##### Breaking

- Split `audioWorklet` environment from `browser`
([#&#8203;320](https://redirect.github.com/sindresorhus/globals/issues/320))
[`7bc293e`](7bc293e)

##### Improvements

- Update globals
([#&#8203;329](https://redirect.github.com/sindresorhus/globals/issues/329))
[`ebe1063`](ebe1063)
- Get all browser globals from both `chrome` and `firefox`
([#&#8203;321](https://redirect.github.com/sindresorhus/globals/issues/321))
[`59ceff8`](59ceff8)
- Add `bunBuiltin` environment
([#&#8203;324](https://redirect.github.com/sindresorhus/globals/issues/324))
[`1bc6e3b`](1bc6e3b)
- Add `denoBuiltin` environment
([#&#8203;324](https://redirect.github.com/sindresorhus/globals/issues/324))
[`1bc6e3b`](1bc6e3b)
- Add `paintWorklet` environment
([#&#8203;323](https://redirect.github.com/sindresorhus/globals/issues/323))
[`4b78f56`](4b78f56)
- Add `sharedWorker` environment
([#&#8203;322](https://redirect.github.com/sindresorhus/globals/issues/322))
[`4a02a85`](4a02a85)

***

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-11 14:29:31 +00:00
renovate[bot]
ac93c8a0e0
chore(deps): update actions/upload-artifact digest to 043fb46 (#434)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
([changelog](bbbca2ddaa..043fb46d1a))
| action | digest | `bbbca2d` → `043fb46` |

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 20:53:39 +00:00
renovate[bot]
970e54e062
chore(deps): update jdx/mise-action action to v4 (#431)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [jdx/mise-action](https://redirect.github.com/jdx/mise-action) |
action | major | `v2` → `v4` |

---

### Release Notes

<details>
<summary>jdx/mise-action (jdx/mise-action)</summary>

### [`v4`](https://redirect.github.com/jdx/mise-action/compare/v3...v4)

[Compare
Source](https://redirect.github.com/jdx/mise-action/compare/v3...v4)

###
[`v3`](https://redirect.github.com/jdx/mise-action/blob/HEAD/CHANGELOG.md#340---2025-10-31)

[Compare
Source](https://redirect.github.com/jdx/mise-action/compare/v2...v3)

##### 🚀 Features

- use autofix.ci to auto-update dist/ on all PRs by
[@&#8203;jdx](https://redirect.github.com/jdx) in
[16e9fd5](16e9fd5251)
- use autofix.ci to auto-update dist/ on all PRs
([#&#8203;308](https://redirect.github.com/jdx/mise-action/issues/308))
by [@&#8203;jdx](https://redirect.github.com/jdx) in
[#&#8203;308](https://redirect.github.com/jdx/mise-action/pull/308)

##### 🐛 Bug Fixes

- add missing `await` to `core.group` calls
([#&#8203;305](https://redirect.github.com/jdx/mise-action/issues/305))
by [@&#8203;smorimoto](https://redirect.github.com/smorimoto) in
[#&#8203;305](https://redirect.github.com/jdx/mise-action/pull/305)
- auto-update dist folder in Renovate PRs via GitHub Actions
([#&#8203;306](https://redirect.github.com/jdx/mise-action/issues/306))
by [@&#8203;jdx](https://redirect.github.com/jdx) in
[#&#8203;306](https://redirect.github.com/jdx/mise-action/pull/306)
- configure Renovate to ignore github-actions\[bot] commits by
[@&#8203;jdx](https://redirect.github.com/jdx) in
[993e7d0](993e7d0bb6)
- run auto-update-dist workflow on all PRs by
[@&#8203;jdx](https://redirect.github.com/jdx) in
[6d0fd75](6d0fd75ed5)

##### 📚 Documentation

- update to v3 in README
([#&#8203;290](https://redirect.github.com/jdx/mise-action/issues/290))
by [@&#8203;pdecat](https://redirect.github.com/pdecat) in
[#&#8203;290](https://redirect.github.com/jdx/mise-action/pull/290)

##### ⚙️ Miscellaneous Tasks

- upgrade all workflows to Node 24 by
[@&#8203;jdx](https://redirect.github.com/jdx) in
[c7b5f37](c7b5f37cad)
- remove unused workflow by
[@&#8203;jdx](https://redirect.github.com/jdx) in
[aecb23d](aecb23d92f)

##### New Contributors

- [@&#8203;smorimoto](https://redirect.github.com/smorimoto) made their
first contribution in
[#&#8203;305](https://redirect.github.com/jdx/mise-action/pull/305)
- [@&#8203;pdecat](https://redirect.github.com/pdecat) made their first
contribution in
[#&#8203;290](https://redirect.github.com/jdx/mise-action/pull/290)

***

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 17:46:00 +00:00
renovate[bot]
41a529d4f6
chore(deps): update actions/upload-artifact action to v7 (#425)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | major | `v6` → `v7` |

---

### Release Notes

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v7`](https://redirect.github.com/actions/upload-artifact/compare/v6...v7)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v6...v7)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 12:58:44 +00:00
renovate[bot]
f2530f6d59
chore(deps): update dependency @types/handlebars to v4.1.0 (#423)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js)
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fhandlebars/4.1.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fhandlebars/4.0.40/4.1.0?slim=true)
|

---

### Release Notes

<details>
<summary>wycats/handlebars.js (@&#8203;types/handlebars)</summary>

###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019)

New Features

- import TypeScript typings -
[`27ac1ee`](27ac1ee)

Security fixes:

- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4),
[#&#8203;1495](https://redirect.github.com/wycats/handlebars.js/issues/1495)

Housekeeping

- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473)
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c)
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21)

Compatibility notes:

Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:

```
class SomeClass {
}

SomeClass.staticProperty = 'static'

var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```

This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#&#8203;1495](https://redirect.github.com/wycats/handlebars.js/issues/1495).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).


[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled because a matching PR was automerged
previously.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 04:52:48 -05:00
renovate[bot]
05f8e725d3
chore(deps): update dependency prettier to v3.8.2 (#421)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [prettier](https://prettier.io)
([source](https://redirect.github.com/prettier/prettier)) | [`3.8.1` →
`3.8.2`](https://renovatebot.com/diffs/npm/prettier/3.8.1/3.8.2) |
![age](https://developer.mend.io/api/mc/badges/age/npm/prettier/3.8.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prettier/3.8.1/3.8.2?slim=true)
|

---

### Release Notes

<details>
<summary>prettier/prettier (prettier)</summary>

###
[`v3.8.2`](https://redirect.github.com/prettier/prettier/compare/3.8.1...fbf300f9d89820364ddc9b2efa05b92b8c01b692)

[Compare
Source](https://redirect.github.com/prettier/prettier/compare/3.8.1...3.8.2)

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - Only on Friday (`* * * * 5`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-10 05:25:55 +00:00
renovate[bot]
1c992c2b17
chore(deps): lock file maintenance (#420)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-06 05:25:01 +00:00
renovate[bot]
d93325ba61
chore(deps): update dependency @types/handlebars to v4.1.0 (#417)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@types/handlebars](https://redirect.github.com/wycats/handlebars.js)
| [`4.0.40` →
`4.1.0`](https://renovatebot.com/diffs/npm/@types%2fhandlebars/4.0.40/4.1.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fhandlebars/4.1.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fhandlebars/4.0.40/4.1.0?slim=true)
|

---

### Release Notes

<details>
<summary>wycats/handlebars.js (@&#8203;types/handlebars)</summary>

###
[`v4.1.0`](https://redirect.github.com/wycats/handlebars.js/blob/HEAD/release-notes.md#v410---February-7th-2019)

New Features

- import TypeScript typings -
[`27ac1ee`](27ac1ee)

Security fixes:

- disallow access to the constructor in templates to prevent RCE -
[`42841c4`](42841c4),
[#&#8203;1495](https://redirect.github.com/wycats/handlebars.js/issues/1495)

Housekeeping

- chore: fix components/handlebars package.json and auto-update on
release -
[`bacd473`](bacd473)
- chore: Use node 10 to build handlebars -
[`78dd89c`](78dd89c)
- chore/doc: Add more release docs -
[`6b87c21`](6b87c21)

Compatibility notes:

Access to class constructors (i.e. `({}).constructor`) is now prohibited
to prevent
Remote Code Execution. This means that following construct will no work
anymore:

```
class SomeClass {
}

SomeClass.staticProperty = 'static'

var template = Handlebars.compile('{{constructor.staticProperty}}');
document.getElementById('output').innerHTML = template(new SomeClass());
// expected: 'static', but now this is empty.
```

This kind of access is not the intended use of Handlebars and leads to
the vulnerability described in
[#&#8203;1495](https://redirect.github.com/wycats/handlebars.js/issues/1495).
We will **not** increase the major version, because such use is not
intended or documented, and because of the potential impact of the issue
(we fear that most people won't use a new major version and the issue
may not be resolved on many systems).


[Commits](https://redirect.github.com/handlebars-lang/handlebars.js/compare/v4.0.12...v4.1.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Only on Friday ( * * * * 5 ) in
timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled because a matching PR was automerged
previously.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-04 18:11:24 +00:00
renovate[bot]
641a2bcbed
chore(deps): update github/codeql-action digest to 5c8a8a6 (#416)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](603b797f8b..5c8a8a642e))
| action | digest | `603b797` → `5c8a8a6` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-03 08:56:48 +00:00
renovate[bot]
ae16675061
chore(deps): lock file maintenance (#415)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-30 08:48:56 +00:00
renovate[bot]
b106a2f3b6
chore(deps): lock file maintenance (#413)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-23 05:26:27 +00:00
jdx
0b4dcb0c10
ci: add communique to enhance release notes (#411)
## Summary
- Add communique tool to mise.toml
- Add `enhance-release` job to release workflow that runs after release
creation to generate AI-enhanced release notes

## Test plan
- [ ] Verify next release triggers the enhance-release job
- [ ] Confirm ANTHROPIC_API_KEY secret is configured in repo settings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds a new post-release GitHub Actions job that uses an external AI
API and an elevated token to modify GitHub release notes; failures or
misconfigured secrets can break the release workflow and token scope
matters.
> 
> **Overview**
> After the `release` job completes, the workflow now runs a new
`enhance-release` job that computes the tag from `package.json` and
calls `communique generate ... --github-release` to update the GitHub
release notes.
> 
> The PR also adds `communique` to `mise.toml` so the tool is available
in CI, and wires in `ANTHROPIC_API_KEY` plus a dedicated
`RELEASE_PLZ_GITHUB_TOKEN` for the release-note update step.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
d2335f661c. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 11:24:46 -05:00
mise-en-dev
1648a7812b
chore: release v4.0.1 (#406)
---
## [4.0.1](https://github.com/jdx/mise-action/compare/v4.0.0..v4.0.1) -
2026-03-22

### 🐛 Bug Fixes

- run npm install in pre-commit hook before build (#410) by
[@jdx](https://github.com/jdx) in
[#410](https://github.com/jdx/mise-action/pull/410)

### 🚜 Refactor

- extract getCwd() helper to deduplicate working directory resolution
(#403) by [@altendky](https://github.com/altendky) in
[#403](https://github.com/jdx/mise-action/pull/403)

### 📚 Documentation

- bump versions listed im README.md (#407) by
[@deining](https://github.com/deining) in
[#407](https://github.com/jdx/mise-action/pull/407)
- bump more versions listed in README.md (#408) by
[@deining](https://github.com/deining) in
[#408](https://github.com/jdx/mise-action/pull/408)

### ⚙️ Miscellaneous Tasks

- add workflow to auto-close stale PRs (#409) by
[@jdx](https://github.com/jdx) in
[#409](https://github.com/jdx/mise-action/pull/409)

### New Contributors

* @deining made their first contribution in
[#408](https://github.com/jdx/mise-action/pull/408)

<!-- generated by git-cliff -->
2026-03-22 16:06:38 +00:00
jdx
e2d499cca6
ci: add workflow to auto-close stale PRs (#409)
## Summary
- Adds a daily workflow that auto-closes PRs inactive for 30+ days
- Skips PRs authored by jdx or labeled `keep-open`
- Includes different close messages depending on CI status (failing vs
passing)

Ported from jdx/mise.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: adds a standalone GitHub Actions workflow that only closes
eligible open PRs and does not affect application/runtime code.
> 
> **Overview**
> Adds a new GitHub Actions workflow (`.github/workflows/pr-closer.yml`)
that runs daily (and manually) to close PRs with no activity for 30+
days.
> 
> The job filters out PRs authored by `jdx` or labeled `keep-open`, and
posts a different close comment when CI checks are failing vs passing.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
959b5b27b2. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-22 11:02:34 -05:00
jdx
0cc0f19036
fix: run npm install in pre-commit hook before build (#410)
## Summary
- Adds `npm install` before `npm run all` in the husky pre-commit hook
- Prevents stale `node_modules` from producing unintended `dist/`
changes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk change confined to developer tooling; it only affects local
pre-commit behavior and should not impact runtime code.
> 
> **Overview**
> Ensures the pre-commit hook runs `npm ci` before `npm run all`, so
builds use a fresh/consistent `node_modules` prior to staging `dist`
changes.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
9b08810a42. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-22 10:54:05 -05:00
Andreas Deininger
89c67a39ab
docs: bump more versions listed in README.md (#408)
This is a continuation of #407: it bumps two more version I overlooked.
2026-03-21 23:43:54 +01:00
Andreas Deininger
0409dde834
docs: bump versions listed im README.md (#407)
This PR bumps the versions mentioned in `README.md` to their latest
versions.
2026-03-21 21:24:20 +01:00
Kyle Altendorf
abadabdb1f
refactor: extract getCwd() helper to deduplicate working directory resolution (#403)
## Summary

- Extracts the duplicated working-directory resolution expression
(`core.getInput('working_directory') || core.getInput('install_dir') ||
process.cwd()`) into a `getCwd()` helper function.
- Replaces the 2 identical inline expressions in `exportMiseEnv()` and
`mise()` with calls to `getCwd()`.

## Motivation

Separated from #402 to allow independent review. This is a pure refactor
with no behavioral change, intended to simplify the diff in #402 by
providing a smaller, self-contained improvement.

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-20 09:07:16 +00:00
renovate[bot]
c5b2043e51
chore(deps): update github/codeql-action digest to 603b797 (#404)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](820e3160e2..603b797f8b))
| action | digest | `820e316` → `603b797` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 05:36:38 +00:00
renovate[bot]
71c0f0ac17
chore(deps): lock file maintenance (#400)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-16 05:13:44 +00:00
mise-en-dev
c1ecc8f748
chore: release v4.0.0 (#398)
---
## [4.0.0](https://github.com/jdx/mise-action/compare/v3.6.3..v4.0.0) -
2026-03-13

### 🚀 Features

- **breaking** Update Node.js version from 20 to 24 (#395) by
[@tumerorkun](https://github.com/tumerorkun) in
[#395](https://github.com/jdx/mise-action/pull/395)

### New Contributors

* @tumerorkun made their first contribution in
[#395](https://github.com/jdx/mise-action/pull/395)

<!-- generated by git-cliff -->
2026-03-13 12:16:02 +01:00
renovate[bot]
1cbe8c560f
chore(deps): update github/codeql-action digest to 820e316 (#397)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](45580472a5..820e3160e2))
| action | digest | `4558047` → `820e316` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: jdx <216188+jdx@users.noreply.github.com>
2026-03-13 11:07:44 +00:00
Orkun Tümer
35ed1d362d
feat!: Update Node.js version from 20 to 24 (#395)
Fixes https://github.com/jdx/mise-action/issues/394

This PR updates the GitHub Actions runner environment to use Node.js 24,
following the deprecation notice for Node.js 20. GitHub has announced
that starting June 2, 2026, Node.js 24 will become the default, and
earlier versions will be restricted to ensure security and performance
standards.

The jdx/mise-action@v3 currently triggers a deprecation warning because
it defaults to the Node.js 20 runtime. To proactively address this and
avoid potential workflow failures during the transition period, we are
opting into the newer runtime version now.

Co-authored-by: jdx <216188+jdx@users.noreply.github.com>
2026-03-13 12:06:18 +01:00
renovate[bot]
02bfe7363e
chore(deps): update actions/setup-node digest to 53b8394 (#396)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-node](https://redirect.github.com/actions/setup-node)
([changelog](6044e13b5d..53b83947a5))
| action | digest | `6044e13` → `53b8394` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-13 05:08:22 +00:00
renovate[bot]
9a9bfbd065
chore(deps): lock file maintenance (#392)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-09 05:10:20 +00:00
mise-en-dev
5228313ee0
chore: release v3.6.3 (#391)
---
## [3.6.3](https://github.com/jdx/mise-action/compare/v3.6.2..v3.6.3) -
2026-03-06

### 🐛 Bug Fixes

- pass cwd to all exec calls in exportMiseEnv() (#390) by
[@andrewthauer](https://github.com/andrewthauer) in
[#390](https://github.com/jdx/mise-action/pull/390)

### New Contributors

* @andrewthauer made their first contribution in
[#390](https://github.com/jdx/mise-action/pull/390)

<!-- generated by git-cliff -->
2026-03-06 10:14:48 -06:00
Andrew Thauer
cea720d8cd
fix: pass cwd to all exec calls in exportMiseEnv() (#390)
## Problem

The `exportMiseEnv()` function ignores the `working_directory` (and
`install_dir`) input when running `mise env --json`. It always executes
in the process default CWD — the GitHub Actions workspace root —
regardless of what directory was used for `mise install`.

This means if a caller sets `working_directory: path/to/subdir`, mise
resolves environment variables against the workspace root's `mise.toml`,
not the intended subdirectory's config.

### Impact

Since mise 2026.2.0, lockfiles are enabled by default. When `mise env
--json` runs without a `mise.lock` present (e.g. because the correct
`working_directory` was not used), mise attempts to resolve loose tool
versions (like `"latest"`) from the network. In environments with
private npm registries, this causes `npm view` calls that fail with 403
errors. Mise retries indefinitely, spawning 20+ orphaned npm processes
and eventually hitting `EAGAIN` (OS error 11), hanging CI permanently.

The other mise commands (`miseInstall`, `miseReshim`, etc.) already pass
`cwd` correctly via the shared `mise()` helper. Only `exportMiseEnv()`
was missing this.

## Fix

Resolve `working_directory` (falling back to `install_dir`, then
`process.cwd()`) at the top of `exportMiseEnv()` and pass `{ cwd }` to
all four `exec.getExecOutput` calls within the function:

- `mise env --redacted --json`
- `mise env --json`
- `mise env --dotenv` (redacted fallback)
- `mise env --dotenv` (legacy fallback)

## Related

- Issue #267: `working_directory` not respected for env export

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-06 10:12:44 -06:00
mise-en-dev
e79ddf65a1
chore: release v3.6.2 (#385)
---
## [3.6.2](https://github.com/jdx/mise-action/compare/v3.6.1..v3.6.2) -
2026-03-02

### 🐛 Bug Fixes

- move file_hash to end of cache key template to prevent prefix matching
(#384) by [@altendky](https://github.com/altendky) in
[#384](https://github.com/jdx/mise-action/pull/384)

### New Contributors

* @altendky made their first contribution in
[#384](https://github.com/jdx/mise-action/pull/384)

<!-- generated by git-cliff -->
2026-03-02 03:45:46 -06:00
renovate[bot]
74b74371ea
chore(deps): lock file maintenance (#389)
This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40My4yIiwidXBkYXRlZEluVmVyIjoiNDMuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-02 09:39:28 +00:00
renovate[bot]
9b0f77b0f2
chore(deps): update github/codeql-action digest to 4558047 (#387)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](f5c2471be7..45580472a5))
| action | digest | `f5c2471` → `4558047` |

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on friday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise-action).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zNi4yIiwidXBkYXRlZEluVmVyIjoiNDMuMzYuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-27 08:58:54 +00:00