build(deps): bump the github-actions group with 3 updates
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [jdx/mise-action](https://github.com/jdx/mise-action) and [Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml](https://github.com/staffbase/gha-workflows).
Updates `actions/checkout` from 6.0.2 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li>
<li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li>
<li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li>
<li>update error wording by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p>
<h2>v6.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Update changelog by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
<li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/yaananth"><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li>
<li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li>
<li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li>
<li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li>
<li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li>
<li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a href="https://github.com/motss"><code>@motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li>
<li><a href="https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10"><code>df4cb1c</code></a> Update changelog for v6.0.3 (<a href="https://redirect.github.com/actions/checkout/issues/2446">#2446</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0">compare view</a></li>
</ul>
</details>
<br />
Updates `jdx/mise-action` from 4.0.1 to 4.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/jdx/mise-action/releases">jdx/mise-action's releases</a>.</em></p>
<blockquote>
<h2>v4.2.0: Bootstrap mode & wget fallback</h2>
<p>This release adds an opt-in <strong>bootstrap mode</strong> for projects that use <code>mise bootstrap</code>, and makes the action work on runner images that ship <code>wget</code> but not <code>curl</code>.</p>
<h2>Added</h2>
<h3>Bootstrap mode (<a href="https://redirect.github.com/jdx/mise-action/pull/522">#522</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a></h3>
<p>Three new inputs let the action drive <code>mise bootstrap</code> instead of <code>mise install</code>:</p>
<pre lang="yaml"><code>- uses: jdx/mise-action@v4
with:
bootstrap: true
bootstrap_skip: "tools,task" # comma-separated parts to skip
bootstrap_args: "--yes" # extra args forwarded to mise bootstrap
</code></pre>
<ul>
<li>When <code>bootstrap: true</code>, the action runs <code>mise bootstrap</code> under the existing <code>install</code> gate and sets <code>MISE_EXPERIMENTAL=1</code> automatically.</li>
<li>If a repo mise lock file is present, it runs <code>mise --locked bootstrap</code>, matching the auto-lock behavior introduced for <code>mise install</code> in v4.1.0.</li>
<li><code>install_args</code> cannot be combined with <code>bootstrap: true</code> — the action fails fast and tells you to use <code>bootstrap_skip</code> / <code>bootstrap_args</code> instead, because full bootstrap doesn't support partial tool install args.</li>
<li>A new <code>{{bootstrap_hash}}</code> template variable is included in the default cache key (and available in custom <code>cache_key</code> templates) so bootstrap and non-bootstrap configurations don't share caches.</li>
</ul>
<p><code>bootstrap_skip</code> relies on <code>mise bootstrap --skip</code> from <a href="https://redirect.github.com/jdx/mise/pull/10497">jdx/mise#10497</a>, so make sure you're on a recent mise version if you use it.</p>
<h2>Fixed</h2>
<ul>
<li><strong>Fall back to <code>wget</code> when <code>curl</code> is unavailable</strong> (<a href="https://redirect.github.com/jdx/mise-action/pull/521">#521</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> — The action used to hard-code <code>curl</code> for fetching the mise binary, tar/zip archives, and the latest <code>VERSION</code> lookup, which broke on minimal runner images that only ship <code>wget</code>. It now prefers <code>curl</code> and transparently falls back to <code>wget</code>, preserving the streaming <code>download | tar</code> fast path for <code>.tar.gz</code> and <code>.tar.zst</code> installs on Linux/macOS. Proxy support is unchanged — both tools honor <code>HTTP_PROXY</code>/<code>HTTPS_PROXY</code>. Addresses <a href="https://redirect.github.com/jdx/mise/issues/10488">jdx/mise#10488</a>.</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Link the known Rust cache interaction note from the README (<a href="https://redirect.github.com/jdx/mise-action/pull/496">#496</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a>.</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/jdx/mise-action/compare/v4.1.0...v4.2.0">https://github.com/jdx/mise-action/compare/v4.1.0...v4.2.0</a></p>
<h2>v4.1.0: automatic --locked installs</h2>
<p>This release adds automatic locked installs when a <code>mise.lock</code> is present, and fixes a long-standing cache-key collision that could poison tool installs when workflows migrate between runner providers.</p>
<h2>Added</h2>
<h3>Automatic <code>--locked</code> install when <code>mise.lock</code> exists (<a href="https://redirect.github.com/jdx/mise-action/pull/495">#495</a>) by <a href="https://github.com/zeitlinger"><code>@zeitlinger</code></a></h3>
<p>When a repo contains <code>mise.lock</code>, the action now automatically passes <code>--locked</code> to <code>mise install</code> (on mise versions that support it). This removes the need to manually set <code>install_args: --locked</code> and prevents <code>mise install</code> from silently mutating the lockfile in CI. Explicit <code>install_args</code> and older mise versions are still respected.</p>
<p>Note: workflows with a stale lockfile may now fail earlier and more explicitly instead of silently updating <code>mise.lock</code> mid-run — this surfaces lockfile drift rather than hiding it.</p>
<h2>Fixed</h2>
<ul>
<li><strong>Cache key collisions across runner providers</strong> (<a href="https://redirect.github.com/jdx/mise-action/pull/456">#456</a>) — the default cache key now includes the runner image (e.g. <code>macos15</code>, <code>ubuntu24</code> for GitHub-hosted runners; <code>self-hosted</code> otherwise). Previously, repos migrating between providers like github-hosted, namespace.so, BuildJet, and self-hosted runners with the same OS/arch could restore a peer provider's <code>~/.local/share/mise/installs/*</code>, causing failures like <code>does not have an executable named '…'</code> or SIGILL crashes from binaries built against a different glibc/CPU featureset. Expect a one-time cache miss after upgrading; thereafter the cache stays scoped per image.</li>
<li><strong><code>mise-shim.exe</code> missing on Windows</strong> (<a href="https://redirect.github.com/jdx/mise-action/pull/476">#476</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> — the action now installs <code>mise-shim.exe</code> alongside <code>mise.exe</code> and repairs restored caches that lack the shim. Fixes <a href="https://redirect.github.com/jdx/mise-action/issues/475">#475</a>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jdx/mise-action/blob/main/CHANGELOG.md">jdx/mise-action's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<hr />
<h2><a href="https://github.com/jdx/mise-action/compare/v4.1.0..v4.2.0">4.2.0</a> - 2026-06-17</h2>
<h3>🚀 Features</h3>
<ul>
<li>support bootstrap mode (<a href="https://redirect.github.com/jdx/mise-action/issues/522">#522</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/522">#522</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li>fall back to wget when curl is unavailable (<a href="https://redirect.github.com/jdx/mise-action/issues/521">#521</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/521">#521</a></li>
</ul>
<h3>📚 Documentation</h3>
<ul>
<li>link rust cache issue (<a href="https://redirect.github.com/jdx/mise-action/issues/496">#496</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/496">#496</a></li>
</ul>
<h3>⚙️ Miscellaneous Tasks</h3>
<ul>
<li><strong>(ci)</strong> fix zizmor version comments (<a href="https://redirect.github.com/jdx/mise-action/issues/506">#506</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/506">#506</a></li>
<li><strong>(ci)</strong> use pr-closer action (<a href="https://redirect.github.com/jdx/mise-action/issues/505">#505</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/505">#505</a></li>
</ul>
<hr />
<h2><a href="https://github.com/jdx/mise-action/compare/v4.0.1..v4.1.0">4.1.0</a> - 2026-06-04</h2>
<h3>🚀 Features</h3>
<ul>
<li>add wings_enabled input (mise-wings cache integration) (<a href="https://redirect.github.com/jdx/mise-action/issues/454">#454</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/454">#454</a></li>
<li>lock install when mise.lock is present (<a href="https://redirect.github.com/jdx/mise-action/issues/495">#495</a>) by <a href="https://github.com/zeitlinger"><code>@zeitlinger</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/495">#495</a></li>
</ul>
<h3>🐛 Bug Fixes</h3>
<ul>
<li><strong>(ci)</strong> add gh auth setup-git to release-plz.sh (<a href="https://redirect.github.com/jdx/mise-action/issues/473">#473</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/473">#473</a></li>
<li><strong>(ci)</strong> pin codeql-action with exact version comment (<a href="https://redirect.github.com/jdx/mise-action/issues/481">#481</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/481">#481</a></li>
<li><strong>(ci)</strong> resolve zizmor findings (<a href="https://redirect.github.com/jdx/mise-action/issues/503">#503</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/503">#503</a></li>
<li>include runner image in cache key to prevent cross-provider collisions (<a href="https://redirect.github.com/jdx/mise-action/issues/456">#456</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/456">#456</a></li>
<li>install mise-shim.exe on Windows (<a href="https://redirect.github.com/jdx/mise-action/issues/476">#476</a>) by <a href="https://github.com/risu729"><code>@risu729</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/476">#476</a></li>
</ul>
<h3>⚙️ Miscellaneous Tasks</h3>
<ul>
<li><strong>(ci)</strong> use !cancelled() instead of always() for final job (<a href="https://redirect.github.com/jdx/mise-action/issues/460">#460</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/460">#460</a></li>
<li><strong>(ci)</strong> remove autofix.ci workflow (<a href="https://redirect.github.com/jdx/mise-action/issues/470">#470</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/470">#470</a></li>
<li><strong>(ci)</strong> add zizmor workflow for github actions security analysis (<a href="https://redirect.github.com/jdx/mise-action/issues/471">#471</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/471">#471</a></li>
<li><strong>(ci)</strong> close failing or conflicted PRs sooner (<a href="https://redirect.github.com/jdx/mise-action/issues/480">#480</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/480">#480</a></li>
<li>add communique to enhance release notes (<a href="https://redirect.github.com/jdx/mise-action/issues/411">#411</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/411">#411</a></li>
<li>migrate from ncc (CJS) to rollup (ESM) (<a href="https://redirect.github.com/jdx/mise-action/issues/436">#436</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/436">#436</a></li>
<li>add final job to aggregate build-test results (<a href="https://redirect.github.com/jdx/mise-action/issues/438">#438</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/438">#438</a></li>
<li>migrate package manager from npm/pnpm/bun to aube (<a href="https://redirect.github.com/jdx/mise-action/issues/455">#455</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/455">#455</a></li>
<li>remove pull_request_target workflow (<a href="https://redirect.github.com/jdx/mise-action/issues/469">#469</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/469">#469</a></li>
<li>update aube tool version (<a href="https://redirect.github.com/jdx/mise-action/issues/501">#501</a>) by <a href="https://github.com/jdx"><code>@jdx</code></a> in <a href="https://redirect.github.com/jdx/mise-action/pull/501">#501</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jdx/mise-action/commit/e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d"><code>e6a8b39</code></a> chore: release v4.2.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/504">#504</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/884d42869346da12ec20a7082de3b5fe8e236c49"><code>884d428</code></a> fix: fall back to wget when curl is unavailable (<a href="https://redirect.github.com/jdx/mise-action/issues/521">#521</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/5f61b63affab7b78e79dec8562c94e0ebd1b90a0"><code>5f61b63</code></a> feat: support bootstrap mode (<a href="https://redirect.github.com/jdx/mise-action/issues/522">#522</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/03d53910f98bfb7555d242a9136d77505539db7a"><code>03d5391</code></a> chore(deps): update node.js to v24.16.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/519">#519</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/0f82543dabdbcc5b4ce04e1166d04020d82a488d"><code>0f82543</code></a> chore(deps): update node.js to v24.16.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/518">#518</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/5d76934c0b29bd4b18da9e2a421c21bb55f1e1cc"><code>5d76934</code></a> chore(deps): update dependency rollup to v4.61.1 (<a href="https://redirect.github.com/jdx/mise-action/issues/516">#516</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/80781a51e156fb8e96a7f96970a5301b5c70467f"><code>80781a5</code></a> chore(deps): update jdx/mise-action action to v4.1.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/517">#517</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/f1eae89ff08c50fe95cc6fa2b8adef3ecd6d935e"><code>f1eae89</code></a> chore(deps): update dependency js-yaml to v4.2.0 (<a href="https://redirect.github.com/jdx/mise-action/issues/515">#515</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/ab3e780cf6a06e6826af8e7c48720b12226c39b5"><code>ab3e780</code></a> chore(deps): update typescript-eslint monorepo to v8.60.1 (<a href="https://redirect.github.com/jdx/mise-action/issues/514">#514</a>)</li>
<li><a href="https://github.com/jdx/mise-action/commit/17d3aa0218aa40c76afd6d9099714e1623f750f6"><code>17d3aa0</code></a> chore(deps): update github/codeql-action action to v4.36.2 (<a href="https://redirect.github.com/jdx/mise-action/issues/513">#513</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/jdx/mise-action/compare/1648a7812b9aeae629881980618f079932869151...e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d">compare view</a></li>
</ul>
</details>
<br />
Updates `Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml` from 13.5.0 to 14.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/staffbase/gha-workflows/releases">Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml's releases</a>.</em></p>
<blockquote>
<h2>Version 14.1.0 🌈</h2>
<h2>Changes</h2>
<h2>🚀 Features</h2>
<ul>
<li>Expose <code>docker-tag-timestamp</code> passthrough in the gitops template <a href="https://github.com/axdotl"><code>@axdotl</code></a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/465">#465</a>)</li>
</ul>
<h2>📝 Documentation</h2>
<ul>
<li>:memo: Update Readme Versions @<a href="https://github.com/apps/staffbase-actions">staffbase-actions[bot]</a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/463">#463</a>)</li>
</ul>
<h2>Version 14.0.1 🌈</h2>
<h2>Changes</h2>
<ul>
<li>chore(deps): bump Staffbase/autodev-action from v2.8.0 to v2.8.1 <a href="https://github.com/0x46616c6b"><code>@0x46616c6b</code></a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/462">#462</a>)</li>
</ul>
<h2>📝 Documentation</h2>
<ul>
<li>:memo: Update Readme Versions @<a href="https://github.com/apps/staffbase-actions">staffbase-actions[bot]</a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/461">#461</a>)</li>
</ul>
<h2>Version 14.0.0 🌈</h2>
<h2>Breaking Change</h2>
<ul>
<li>feat!: migrate all templates from app_id to client_id (major) <a href="https://github.com/timdittler"><code>@timdittler</code></a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/458">#458</a>)</li>
</ul>
<pre lang="diff"><code>jobs:
dependabot:
uses: Staffbase/gha-workflows@0c8a1fb # v14.0.0
permissions: {}
with:
update-types: major,minor,patch
include-pre-release: true
secrets:
- app_id: ${{ <your-app-id> }}
+ # client id of the GitHub App for authentication
+ client_id: ${{ <your-client-id> }}
private_key: ${{ <your-private-key> }}
</code></pre>
<h2>📝 Documentation</h2>
<ul>
<li>:memo: Update Readme Versions @<a href="https://github.com/apps/staffbase-actions">staffbase-actions[bot]</a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/457">#457</a>)</li>
</ul>
<h2>🚨 Dependencies</h2>
<ul>
<li>chore(deps): bump Staffbase/gitops-github-action from 7.5.1 to 7.6.1 @<a href="https://github.com/apps/dependabot">dependabot[bot]</a> (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/460">#460</a>)</li>
</ul>
<h2>Version 13.6.0 🌈</h2>
<h2>Changes</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/7433384f8737623f2c8eb247427830629ce66d97"><code>7433384</code></a> Merge pull request <a href="https://redirect.github.com/staffbase/gha-workflows/issues/465">#465</a> from Staffbase/feat/gitops-docker-tag-timestamp</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/e05cc88a9dd690334b7ee6493c8465efdf030268"><code>e05cc88</code></a> ✨ expose docker-tag-timestamp in the gitops template</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/9536b51f4e7c5df5f4b158d943fbab890a8a8bfe"><code>9536b51</code></a> 📝 update readme versions (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/463">#463</a>)</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/950f59ec63af0f698ce35fd9270b2c63e3e91c06"><code>950f59e</code></a> Merge pull request <a href="https://redirect.github.com/staffbase/gha-workflows/issues/462">#462</a> from Staffbase/bump_autodev_action_v2.8.1</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/f798ceea86ae6c792a9b25c8ab54b378f022596d"><code>f798cee</code></a> chore(deps): bump Staffbase/autodev-action from v2.8.0 to v2.8.1</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/4f799eff47a3ab9061445ae0772fef30f010d893"><code>4f799ef</code></a> 📝 update readme versions (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/461">#461</a>)</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/0c8a1fb18237b9c069a5e2d1ec3ec3c8fd83c208"><code>0c8a1fb</code></a> chore(deps): bump Staffbase/gitops-github-action from 7.5.1 to 7.6.1 (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/460">#460</a>)</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/2d5eaf5083579c10319939c8038350dc0ae40cf3"><code>2d5eaf5</code></a> feat!: migrate all templates from app_id to client_id (major) (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/458">#458</a>)</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/8e4764f6774974e6ff0e787cfb1a3bd0d0ffdaf4"><code>8e4764f</code></a> 📝 update readme versions (<a href="https://redirect.github.com/staffbase/gha-workflows/issues/457">#457</a>)</li>
<li><a href="https://github.com/Staffbase/gha-workflows/commit/ac78ecb1f1c4cb17ca721e3eb268ea8293a2a8a2"><code>ac78ecb</code></a> Merge pull request <a href="https://redirect.github.com/staffbase/gha-workflows/issues/456">#456</a> from Staffbase/bump_gitops_action_v7.5.1</li>
<li>Additional commits viewable in <a href="https://github.com/staffbase/gha-workflows/compare/642889f5d6f346d2f0bfde007cba255df0769b8c...7433384f8737623f2c8eb247427830629ce66d97">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>