Skip to content

chore: bump the all group with 2 updates#33

Merged
jimid27 merged 1 commit intomainfrom
dependabot/github_actions/all-fbc3ad1d68
Apr 3, 2026
Merged

chore: bump the all group with 2 updates#33
jimid27 merged 1 commit intomainfrom
dependabot/github_actions/all-fbc3ad1d68

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 1, 2026

Bumps the all group with 2 updates: updatecli/updatecli-action and jdx/mise-action.

Updates updatecli/updatecli-action from 2.100.0 to 3.0.0

Release notes

Sourced from updatecli/updatecli-action's releases.

v3.0.0 🌈

[!IMPORTANT]
The branch v1 and v2 are deprecated and will be remove soon. Y You should use GitHub action version instead (or track the main branch if you really want to). You can migrate to the latest GitHub action version using the following Updatecli policy:

.updatecli-compose.yaml

# export UPDATECLI_GITHUB_TOKEN=<insert PAT>
# export UPDATECLI_GITHUB_USERNAME=<insert username>
# updatecli compose diff --file updatecli-compose.yaml
# updatecli compose apply --file updatecli-compose.yaml

valuesinline: scm: enabled: true kind: githubsearch search: | org:<replace with your GitHub organization> archived:false branch: "^main$|^master$" # branch accept regular expression email: <email associatedi with the git commits> limit: 0 # zero means no repository limit

policies:

  • name: Update Updatecli GitHub action version policy: ghcr.io/updatecli/policies/updatecli/githubaction:0.8.1

Changes

🚀 Features

🧰 Maintenance

... (truncated)

Commits

Updates jdx/mise-action from 3 to 4

Release notes

Sourced from jdx/mise-action's releases.

v4.0.0: Node.js 24 Runtime

A major version bump that updates the action's runtime from Node.js 20 to Node.js 24. GitHub has deprecated Node.js 20 for Actions and will force Node.js 24 as the default starting June 2, 2026. This release proactively adopts the new runtime to eliminate deprecation warnings and ensure continued compatibility.

Breaking Changes

  • The action now runs on the Node.js 24 runtime instead of Node.js 20. If your workflow pins jdx/mise-action@v3, you will continue to see deprecation warnings. Update to jdx/mise-action@v4 to resolve them:

    - uses: jdx/mise-action@v4

    This should be a seamless upgrade for the vast majority of users — no configuration changes are needed beyond updating the version reference.

Changed

New Contributors

Full Changelog: jdx/mise-action@v3...v4.0.0

v3.6.3

What's Changed

New Contributors

Full Changelog: jdx/mise-action@v3.6.2...v3.6.3

v3.6.2

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

3.5.1 - 2025-11-24

🔍 Other Changes

  • Revert "feat(action): moved save cache to post step" (#329) by @​jdx in #329

3.5.0 - 2025-11-21

🚀 Features

New Contributors


Commits
  • 1648a78 chore: release v4.0.1 (#406)
  • e2d499c ci: add workflow to auto-close stale PRs (#409)
  • 0cc0f19 fix: run npm install in pre-commit hook before build (#410)
  • 89c67a3 docs: bump more versions listed in README.md (#408)
  • 0409dde docs: bump versions listed im README.md (#407)
  • abadabd refactor: extract getCwd() helper to deduplicate working directory resolution...
  • c5b2043 chore(deps): update github/codeql-action digest to 603b797 (#404)
  • 71c0f0a chore(deps): lock file maintenance (#400)
  • c1ecc8f chore: release v4.0.0 (#398)
  • 1cbe8c5 chore(deps): update github/codeql-action digest to 820e316 (#397)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 2 updates: [updatecli/updatecli-action](https://github.com/updatecli/updatecli-action) and [jdx/mise-action](https://github.com/jdx/mise-action).


Updates `updatecli/updatecli-action` from 2.100.0 to 3.0.0
- [Release notes](https://github.com/updatecli/updatecli-action/releases)
- [Commits](updatecli/updatecli-action@v2.100.0...v3.0.0)

Updates `jdx/mise-action` from 3 to 4
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@v3...v4)

---
updated-dependencies:
- dependency-name: updatecli/updatecli-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: jdx/mise-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@jimid27
Copy link
Copy Markdown
Collaborator

jimid27 commented Apr 1, 2026

TL;DR

⚠️ REVIEW NEEDEDupdatecli/updatecli-action jumps a major version (v2 → v3). Verify the action interface hasn't changed before merging.

📋 Full Review

Changes

Dependency Old → New Type
jdx/mise-action v3 → v4 major
updatecli/updatecli-action v2.100.0 → v3.0.0 major

Key Updates

jdx/mise-action v4 — Node.js 20 → 24 runtime upgrade (same pattern as other mise-action bumps across the org). No breaking changes to the action interface; just the GitHub Actions runner runtime update ahead of GitHub's June 2026 deprecation.

updatecli/updatecli-action v3.0.0 — Major version jump. Release notes were not available via GitHub API. Review the updatecli-action changelog for breaking changes to input parameters or behavior before merging.

Risk Assessment

Medium — The mise-action v4 is safe (confirmed Node.js runtime upgrade only). The updatecli-action major bump needs manual changelog review to confirm no breaking input/output changes before merging.


Reviewed by Claude Code /review-deps skill

Copy link
Copy Markdown
Collaborator

@jimid27 jimid27 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

doesnt look like anything breaking so giving it the green light

@jimid27 jimid27 merged commit b26a28d into main Apr 3, 2026
1 check passed
@jimid27 jimid27 deleted the dependabot/github_actions/all-fbc3ad1d68 branch April 3, 2026 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant