Skip to content

Migrate to step-security/mise-action for tool installation - #74

Merged
krukonshedul merged 5 commits into
masterfrom
chore/mise-setup-migration
Aug 10, 2026
Merged

Migrate to step-security/mise-action for tool installation#74
krukonshedul merged 5 commits into
masterfrom
chore/mise-setup-migration

Conversation

@krukonshedul

Copy link
Copy Markdown
Contributor

Summary

  • Replace erlef/setup-beam with step-security/mise-action, per the org's mise migration.
  • The test job's elixir/otp compatibility matrix (1.15/26 through 1.18/27) is preserved via MISE_ELIXIR_VERSION/MISE_ERLANG_VERSION env overrides driven by the matrix values.
  • The publish job's env.ELIXIR_VERSION/env.OTP_VERSION (1.18.3/27.3) exactly match mise.toml, so it's a plain swap with no version change.
  • Bump internal GHAs via alflow (if applicable).

Test plan

  • CI green on this PR (all matrix legs, publish job)

…guage setup-X actions

Replaces erlef/setup-beam with step-security/mise-action, per the
org's mise migration. The test job's elixir/otp compatibility matrix
(1.15/26 through 1.18/27) is preserved via MISE_ELIXIR_VERSION/
MISE_ERLANG_VERSION env overrides driven by the matrix values. The
publish job's env.ELIXIR_VERSION/env.OTP_VERSION (1.18.3/27.3) exactly
match mise.toml, so it's a plain swap.
Regenerates .github/actions.lock.yaml and bumps any internal
freshaengineering/* action pins picked up by alflow.
@socket-security

socket-security Bot commented Aug 4, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedstep-security/​mise-action@​2796166110dee826668caddd4bffedae5116e7cd99100100100100

View full report

krukonshedul and others added 2 commits August 10, 2026 12:16
# Conflicts:
#	.github/workflows/ci.yaml
A bare "elixir = \"1.18\"" pin (or matrix override) makes mise fetch
the newest OTP-linked precompiled build for that elixir line
(e.g. 1.18.4-otp-28), ignoring any co-pinned/co-overridden erlang
version entirely. When the actual OTP installed is older, the
fetched elixir binary refuses to boot:

  Failed to load module 'elixir' because it requires a more recent
  Erlang/OTP version...

Fix: suffix the elixir version with -otp-<matching otp> everywhere
it's declared or overridden, so mise resolves a build actually
compiled against the OTP version in use.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

@dyl-sv dyl-sv left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the migration and compared the failing jobs with base history. Tool-version/matrix semantics are preserved; the current failure is downstream of successful mise setup and is either identical to recent base failures or a transient external-network failure.

@krukonshedul
krukonshedul merged commit a56df71 into master Aug 10, 2026
9 checks passed
@krukonshedul
krukonshedul deleted the chore/mise-setup-migration branch August 10, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants