chore(deps): update ci dependencies by renovate[bot] · Pull Request #339 · NTUT-NPC/tattoo

renovate · 2026-06-30T16:46:19Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v5.0.5` → `v5.1.0`
actions/checkout (changelog)	action	digest	`de0fac2` → `df4cb1c`
caddy	final	digest	`86deaf5` → `5f5c864`
debian	stage	digest	`b6e2a15` → `28de087`
fastlane (source, changelog)		minor	`"~> 2.235.0"` → `"~> 2.236.0"`
flutter	tool-constraint	patch	`3.44.1` → `3.44.4`
jdx/mise-action	action	minor	`v4.0.1` → `v4.2.0`
ruby/setup-ruby	action	minor	`v1.310.0` → `v1.316.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/cache (actions/cache)

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

fastlane/fastlane (fastlane)

`v2.236.1`: Improvements

Compare Source

Revert "[transporter] Decode Base64 key content for .p8 file generation in Al…" (#30066) via Connor Tumbleson (@iBotPeaches)

`v2.236.0`: Improvements

Compare Source

[ci] fix: add 'multi_json' as direct dep due to upstream googleapis bug. (#30062) via Connor Tumbleson (@iBotPeaches)
Fix --copy_to_clipboard flag for spaceauth command (#29888) via owurman (@owurman)
[transporter] Decode Base64 key content for .p8 file generation in Al… (#30057) via Kaan Çembertaş (@kaancembertas)
[ci] remove xcode 16.3 as CircleCI dropped it (#30058) via Connor Tumbleson (@iBotPeaches)
[action] Add update_app_age_rating action for standalone age rating updates (#30025) via Pratik Patil (@PratikPatil131)
[core] Set ruby-jwt gem to v2.10.3 minimum. (#30056) via Nakshatra Singh (@nakshatrasinghh)
[snapshot] run simulator using Rosetta2 for Apple Silicon (#21559) via Iceman (@sidepelican)
[snapshot] use simulator UDIDs for destinations (#30054) via Philip Niedertscheider (@philprime)
[spaceship] remove dots from names (#30052) via Tim Shedor (@tshedor)
[docs] keep docs assets moving along during update_docs (#30051) via Connor Tumbleson (@iBotPeaches)

containerbase/flutter-prebuild (flutter)

`v3.44.4`

Compare Source

Bug Fixes

deps: update dependency flutter to v3.44.4

`v3.44.3`

Compare Source

Bug Fixes

deps: update dependency flutter to v3.44.3

`v3.44.2`

Compare Source

Bug Fixes

deps: update dependency flutter to v3.44.2

jdx/mise-action (jdx/mise-action)

`v4.2.0`: : Bootstrap mode & wget fallback

Compare Source

This release adds an opt-in bootstrap mode for projects that use mise bootstrap, and makes the action work on runner images that ship wget but not curl.

Added

Bootstrap mode (#522) by @jdx

Three new inputs let the action drive mise bootstrap instead of mise install:

- uses: jdx/mise-action@v4
  with:
    bootstrap: true
    bootstrap_skip: "tools,task"   # comma-separated parts to skip
    bootstrap_args: "--yes"        # extra args forwarded to mise bootstrap

When bootstrap: true, the action runs mise bootstrap under the existing install gate and sets MISE_EXPERIMENTAL=1 automatically.
If a repo mise lock file is present, it runs mise --locked bootstrap, matching the auto-lock behavior introduced for mise install in v4.1.0.
install_args cannot be combined with bootstrap: true — the action fails fast and tells you to use bootstrap_skip / bootstrap_args instead, because full bootstrap doesn't support partial tool install args.
A new {{bootstrap_hash}} template variable is included in the default cache key (and available in custom cache_key templates) so bootstrap and non-bootstrap configurations don't share caches.

bootstrap_skip relies on mise bootstrap --skip from jdx/mise#10497, so make sure you're on a recent mise version if you use it.

Fixed

Fall back to wget when curl is unavailable (#521) by @risu729 — The action used to hard-code curl for fetching the mise binary, tar/zip archives, and the latest VERSION lookup, which broke on minimal runner images that only ship wget. It now prefers curl and transparently falls back to wget, preserving the streaming download | tar fast path for .tar.gz and .tar.zst installs on Linux/macOS. Proxy support is unchanged — both tools honor HTTP_PROXY/HTTPS_PROXY. Addresses jdx/mise#10488.

Documentation

Link the known Rust cache interaction note from the README (#496) by @risu729.

Full Changelog: jdx/mise-action@v4.1.0...v4.2.0

`v4.1.0`: : automatic --locked installs

Compare Source

This release adds automatic locked installs when a mise.lock is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.

Added

Automatic `--locked` install when `mise.lock` exists (#495) by @zeitlinger

When a repo contains mise.lock, the action now automatically passes --locked to mise install (on mise versions that support it). This removes the need to manually set install_args: --locked and prevents mise install from silently mutating the lockfile in CI. Explicit install_args and older mise versions are still respected.

Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating mise.lock mid-run — this surfaces lockfile drift rather than hiding it.

Fixed

Cache key collisions across runner providers (#456) — the default cache key now includes the runner image (e.g. macos15, ubuntu24 for GitHub-hosted runners; self-hosted otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's ~/.local/share/mise/installs/*, causing failures like does not have an executable named '…' or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.
mise-shim.exe missing on Windows (#476) by @risu729 — the action now installs mise-shim.exe alongside mise.exe and repairs restored caches that lack the shim. Fixes #475.

Changed

Migrated the bundled action build from ncc (CommonJS) to Rollup (ESM) (#436). No user-facing behavior change.

Full Changelog: jdx/mise-action@v4.0.1...v4.1.0

ruby/setup-ruby (ruby/setup-ruby)

`v1.316.0`

Compare Source

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in #926

Full Changelog: ruby/setup-ruby@v1.315.0...v1.316.0

`v1.315.0`

Compare Source

What's Changed

Bump actions/checkout from 6 to 7 by @dependabot[bot] in #924
Add ruby-3.4.10 by @ruby-builder-bot in #925

Full Changelog: ruby/setup-ruby@v1.314.0...v1.315.0

`v1.314.0`

Compare Source

What's Changed

Add support for ubuntu-26.04 and ubuntu-26.04-arm by @eregon in #923

Full Changelog: ruby/setup-ruby@v1.313.0...v1.314.0

`v1.313.0`

Compare Source

What's Changed

Add jruby-10.0.6.0 by @ruby-builder-bot in #921

Full Changelog: ruby/setup-ruby@v1.312.0...v1.313.0

`v1.312.0`

Compare Source

What's Changed

Use BUNDLE_LOCKFILE when detecting the lockfile by @Thomascountz in #919

New Contributors

@Thomascountz made their first contribution in #919

Full Changelog: ruby/setup-ruby@v1.311.0...v1.312.0

`v1.311.0`

Compare Source

What's Changed

Add jruby-9.4.15.0 by @ruby-builder-bot in #920

Full Changelog: ruby/setup-ruby@v1.310.0...v1.311.0

Configuration

📅 Schedule: (in timezone Asia/Taipei)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-06-30T16:46:30Z

PR Preview Builds

Build Number: 1154
Commit: ff644d7
Message: chore(deps): update ci dependencies

rileychh-dokploy-riley-ntut-npc · 2026-07-02T21:34:43Z

Dokploy Preview Deployment

Name	Status	Preview	Updated (UTC)
API Docs	✅ Done	Preview URL	2026-07-02T21:39:18.714Z

chore(deps): update ci dependencies

ff644d7

renovate Bot force-pushed the renovate/ci branch from 6f1c804 to ff644d7 Compare July 2, 2026 21:34

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update ci dependencies#339

chore(deps): update ci dependencies#339
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ci

renovate Bot commented Jun 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 30, 2026 •

edited

Loading

Uh oh!

rileychh-dokploy-riley-ntut-npc Bot commented Jul 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

v2.236.1: Improvements

v2.236.0: Improvements

Bug Fixes

Bug Fixes

Bug Fixes

v4.2.0: : Bootstrap mode & wget fallback

Added

Bootstrap mode (#​522) by @​jdx

Fixed

Documentation

v4.1.0: : automatic --locked installs

Added

Automatic --locked install when mise.lock exists (#​495) by @​zeitlinger

Fixed

Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Preview Builds

Uh oh!

rileychh-dokploy-riley-ntut-npc Bot commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dokploy Preview Deployment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 30, 2026 •

edited

Loading

`v2.236.1`: Improvements

`v2.236.0`: Improvements

`v4.2.0`: : Bootstrap mode & wget fallback

Bootstrap mode (#522) by @jdx

`v4.1.0`: : automatic --locked installs

Automatic `--locked` install when `mise.lock` exists (#495) by @zeitlinger

github-actions Bot commented Jun 30, 2026 •

edited

Loading

rileychh-dokploy-riley-ntut-npc Bot commented Jul 2, 2026 •

edited

Loading