You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
controls: add projectMustHaveSecurityPolicySource (ISSUE-601, GitLab Ultimate) and renumber workflowsMustHaveExplicitName to ISSUE-422 for site parity (9d62204)
🐛 Bug Fixes
controls: address review on the security policy source control (0217d76)
📚 Documentation
controls: update controls doc to make it more precise (1eaca39)
controls: add mergeRequestSettingsMustBeCompliant (ISSUE-506) with a conditional Premium/Ultimate caveat for merge-train and merged-pipeline expectations (6345dc4)
controls: make ISSUE-503 approval-settings findings read as current-vs-expected and add a Premium/Ultimate tier caveat when no protections are in effect (deacbfb)
🐛 Bug Fixes
controls: address review on the MR approval/settings controls (a70ef57)
cli: fall back to the built-in default config when no .plumber.yaml is found instead of failing, so scans work with zero setup. Remove the redundant config baked into the Docker image and drop the stale 'global config' wording (#326). (9a1ea62)
When version is omitted, you can now set minimum_release_age to install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #603).
It accepts relative durations (24h, 7d, 6mo, 1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicit version always takes precedence over minimum_release_age, and invalid dates fail fast.
A small patch release that makes setup more resilient to transient network failures when downloading mise.
Fixed
Retry mise downloads after transient failures (#597 by @jdx)
The download helpers previously made a single curl or wget attempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see #596).
Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.
Bug fix: #128 Resolve relative PATH entries against the user provided CWD when available, rather than the process CWD.
Thanks @RSS1102 for your contribution to which!
Configuration
📅 Schedule: (in timezone UTC)
Branch creation
Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
If you want to rebase/retry this PR, check this box
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
This PR contains the following updates:
v7.0.0→v7.0.11.0.101→1.0.104v0.35.0→v0.36.04.5.57→4.6.60.10→0.12v0.4.8→v0.4.48c4dd10e→6f5948dv4.2.4→v4.3.0ea2ea90→fe5b4a58.0.5→8.0.6Release Notes
actions/checkout (actions/checkout)
v7.0.1Compare Source
dtolnay/anyhow (anyhow)
v1.0.104Compare Source
syndev-dependency to version 3v1.0.103Compare Source
Error::downcast_mut(#451, #452)v1.0.102Compare Source
aquasecurity/trivy-action (aquasecurity/trivy-action)
v0.36.0Compare Source
What's Changed
New Contributors
Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0
clap-rs/clap (clap)
v4.6.6Compare Source
Features
Command::get_overridden_usagev4.6.5Compare Source
v4.6.4Compare Source
Internal
v4.6.3Compare Source
Fixes
"literal".function()as attribute valuesv4.6.2Compare Source
Fixes
aliaswhen there is only onev4.6.1Compare Source
Fixes
v4.6.0Compare Source
Compatibility
v4.5.61Compare Source
Internal
v4.5.60Compare Source
Fixes
v4.5.59Compare Source
Fixes
Command::ignore_errorsno longer masks help/version on subcommandsv4.5.58Compare Source
console-rs/dialoguer (dialoguer)
v0.12.0: 0.12.0Compare Source
What's Changed
select.rsexample by @jwodder in #289thiserrorwith a manual impl by @CosmicHorrorDev in #327v0.11.0: 0.11.0Compare Source
What's Changed
FuzzySelectby @damymetzke in #259Historyby @Garbaz in #209MultiSelectitems by @Gordon01 in #275passwordexample instead of bytes by @Gordon01 in #276ColorfulTheme.inline_selectionsby @Gordon01 in #277getplumber/plumber (getplumber/plumber)
v0.4.48Compare Source
✨ Features
👷 CI/CD
v0.4.47Compare Source
✨ Features
👷 CI/CD
v0.4.46Compare Source
✨ Features
🐛 Bug Fixes
👷 CI/CD
v0.4.45Compare Source
✨ Features
🐛 Bug Fixes
👷 CI/CD
v0.4.44Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.43Compare Source
✨ Features
🐛 Bug Fixes
📚 Documentation
👷 CI/CD
v0.4.42Compare Source
✨ Features
🐛 Bug Fixes
👷 CI/CD
v0.4.41Compare Source
✨ Features
👷 CI/CD
v0.4.40Compare Source
✨ Features
👷 CI/CD
v0.4.39Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.38Compare Source
✨ Features
👷 CI/CD
v0.4.37Compare Source
✨ Features
👷 CI/CD
v0.4.36Compare Source
✨ Features
🐛 Bug Fixes
👷 CI/CD
v0.4.35Compare Source
🔧 Chores
👷 CI/CD
v0.4.34Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.33Compare Source
✨ Features
👷 CI/CD
v0.4.32Compare Source
🐛 Bug Fixes
⚡ Performance
🔧 Chores
📚 Documentation
✅ Tests
👷 CI/CD
v0.4.31Compare Source
✨ Features
👷 CI/CD
v0.4.30Compare Source
🔧 Chores
👷 CI/CD
v0.4.29Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.28Compare Source
✨ Features
👷 CI/CD
v0.4.27Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.26Compare Source
🐛 Bug Fixes
♻️ Refactoring
✅ Tests
👷 CI/CD
v0.4.25Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.24Compare Source
✨ Features
config initfrom it (aebf2d1), closes #1🐛 Bug Fixes
🔧 Chores
✅ Tests
👷 CI/CD
v0.4.23Compare Source
🔧 Chores
📚 Documentation
👷 CI/CD
v0.4.22Compare Source
✨ Features
✅ Tests
👷 CI/CD
v0.4.21Compare Source
🔧 Chores
👷 CI/CD
v0.4.20Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.19Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.18Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.17Compare Source
✨ Features
👷 CI/CD
v0.4.16Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.15Compare Source
✨ Features
👷 CI/CD
v0.4.14Compare Source
🐛 Bug Fixes
📚 Documentation
👷 CI/CD
v0.4.13Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.12Compare Source
✨ Features
👷 CI/CD
v0.4.11Compare Source
🐛 Bug Fixes
👷 CI/CD
v0.4.10Compare Source
✨ Features
🐛 Bug Fixes
👷 CI/CD
v0.4.9Compare Source
🐛 Bug Fixes
👷 CI/CD
jdx/mise-action (jdx/mise-action)
v4.3.0: : Install age-filtered mise releasesCompare Source
A small release that adds an opt-in way to hold back from installing brand-new mise releases.
Added
minimum_release_ageinput (#604 by @jdx)When
versionis omitted, you can now setminimum_release_ageto install the newest stable, non-draft mise release that is older than a given cutoff — a simple way to avoid picking up a mise release the moment it ships (closes #603).It accepts relative durations (
24h,7d,6mo,1y) as well as absolute ISO dates and timestamps. Age-filtered versions are resolved from the GitHub Releases API (the CDN only serves the latest binary) and downloaded by their exact version. If mise is already present on disk, an age-filtered run updates it to the resolved version rather than keeping the existing binary. An explicitversionalways takes precedence overminimum_release_age, and invalid dates fail fast.Full Changelog: jdx/mise-action@v4.2.5...v4.3.0
v4.2.5: : Resilient mise downloads with automatic retriesCompare Source
A small patch release that makes setup more resilient to transient network failures when downloading mise.
Fixed
Retry mise downloads after transient failures (#597 by @jdx)
The download helpers previously made a single
curlorwgetattempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see #596).Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.
Full Changelog: jdx/mise-action@v4.2.4...v4.2.5
harryfei/which-rs (which)
v8.0.6Compare Source
Thanks @RSS1102 for your contribution to which!
Configuration
📅 Schedule: (in timezone UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.