Pin dependencies - #290
Conversation
|
93273ff to
72c65a5
Compare
renovate
Bot
changed the title
|
SummaryThis Renovate-generated PR pins GitHub Actions workflow dependencies to specific commit SHAs, replacing floating version references like Note: The actual versions pinned in the workflows differ from those listed in the PR description:
Reviewers should verify these versions are intentional, not accidental updates. What reviewers should knowFiles modified: All
Security context: Pinning to commit SHAs prevents unexpected action behavior from future version releases while still maintaining version comments for reference. Verification needed: Cross-check the actual pinned versions (in the
|
![sonar-review-alpha[bot]](https://avatars.githubusercontent.com/in/3025063?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
72c65a5 to
18c861e
Compare
|
There was a problem hiding this comment.
LGTM! ✅
Clean dependency-pinning PR with no bugs or logic issues. The versions actually pinned in the workflows differ from the PR description: ci-github-actions is pinned to 1.4.0 (description says 1.3.35) and gh-action_release to 7.0.1 (description says 7.0.0). This is a known Renovate behaviour — the description can fall out of sync if the upstream tag moves between when Renovate opens the PR and when it commits. The SHAs in the workflows are what matters; confirm they resolve to the intended tags before merging.
18c861e to
5ea85e2
Compare
|
5ea85e2 to
08740c6
Compare
08740c6 to
9af7da3
Compare
9af7da3 to
4b7c790
Compare
4b7c790 to
012d4be
Compare
012d4be to
2f46314
Compare
2f46314 to
8fd3dc6
Compare
8fd3dc6 to
f23e8f1
Compare
|
6eb2a02 to
4e85245
Compare
6b5346a to
772dc18
Compare
12146a7 to
d5acf59
Compare
150d756 to
1f3776d
Compare
1f3776d to
e85144d
Compare
e85144d to
5ba3989
Compare
|
|
This PR contains the following updates:
v1→1.8.91.1.0→1.2.1v3→3.2.2v7→7.4.0v7→v7.0.12026.6.1→2026.8.4v2026.8.6(+1)2025.7.12→2025.12.13v4.1.0→v4.2.4v4.2.5v4.2.0→v4.2.4v4.2.5Add the preset
:preserveSemverRangesto your config if you don't want to pin your dependencies.Release Notes
SonarSource/gh-action_pre-commit (SonarSource/gh-action_pre-commit)
v1.2.1Compare Source
What's Changed
Dependency Updates
v6.1.0→v6.3.0(#45)v4→v4.0.1(#45)v5.0.1→v6.1.0(#46)v6.0.1→v7.0.0(#46)v2.0.0→v4.0.1(#46)v2→v4(#46)Internal & Chores
PullRequestClosed,PullRequestCreated,RequestReview,SubmitReview) to automate Jira status updates on PR review events, usingSonarSource/vault-action-wrapperfor credential retrieval (#49, BUILD-11517)Full Changelog: SonarSource/gh-action_pre-commit@1.2.0...1.2.1
v1.2.0Compare Source
What's Changed
New Contributors
Full Changelog: SonarSource/gh-action_pre-commit@1.1.0...1.2.0
jdx/mise (jdx/mise)
v2026.8.4: : Cross-backend ls, semver ordering, and bootstrap cask pruningCompare Source
This release adds explicit semantic version ordering for major backends, teaches
mise lsandmise install --forceto work across backends, extends bootstrap package management with platform filters and cask pruning, and lands a broad batch of task, config, and platform-specific fixes.Added
backend: tools can now declare an explicit
version_order(sourceorsemver) so thatlatestand version-prefix resolution follow semantic precedence instead of source/chronological order. This is enabled for Aqua, GitHub, GitLab, Forgejo, and HTTP backends, and fixes cases where a backport or older release line was picked ahead of a newer version (for example neo4j, victoria-metrics, go-getter, talosctl, rpk, and tealdeer).mise ls-remotecontinues to show upstream source order. (#11774 by @jdx)ls:
mise ls <name>now matches a tool installed from multiple backends. Previously, installing a tool from both its registry backend and, say, acargo:orubi:build would show only one of them undermise ls <name>even though both were on PATH. Spelling out a backend (e.g.mise ls ubi:jqlang/jq) still narrows to that single backend. (#11822 by @JamBalaya56562)install:
mise install --forcenow works without tool arguments, reinstalling every configured, OS-supported tool (or the monorepo union with--monorepo). (#11802 by @Marukome0743)upgrade: add an
upgrade.auto_prunesetting (defaulttrue) that controls whethermise upgraderemoves the version it replaced, plus a--pruneflag to force removal on for a single run when the setting is off. Useful when a mise-managed interpreter backs a virtualenv you do not want deleted on unattended upgrades. (#11788 by @JamBalaya56562)bootstrap:
mise bootstrap packages prune --manager brew-caskcan now conservatively remove mise-owned Homebrew casks that are no longer declared in[bootstrap.packages]. Removal is gated by install-time receipt metadata, fingerprint checks, and ownership validation, and Homebrew-owned, pkg, lifecycle, drifted, or shared casks are skipped with an explicit reason. (#11810 by @jdx)bootstrap:
[bootstrap.packages]entries can now use table form with aversionand[tools]-styleosselectors, so a single config can target macOS-only casks and Linux fonts. Platform-incompatible packages surface as unavailable in status output instead of aborting the run, while explicit requests for unsupported packages still error. (#11809 by @jdx)brew: the
brew-caskmanager now supports installing font casks directly from git URLs, including selecting a branch and staging files from a subdirectory. (#11781 by @roele)aqua: relative
aqua.registriesentries in a config file are now resolved against that config's root, so aregistry.yamlcommitted inside a project repository can be referenced without a machine-specific absolute path. (#11804 by @JamBalaya56562)spm:
spm:installs can now be pinned to a commit viarev:<commit>(and compatibleref:<commit>), building from source. (#11815 by @Marukome0743)generate: generated git hooks can now carry extra mise flags. Anything after
--is inserted betweenmiseandrun, so a hook can target config in a subdirectory or set other global flags. (#11820 by @JamBalaya56562)Fixed
mise watchwith no task name now runs thedefaulttask, matchingmise run, instead of failing with "No tasks specified". (#11836 by @Marukome0743)--silentand--log-levelare now forwarded into the generated activation hook, so per-directoryhook-envoutput can actually be silenced. (#11831 by @JamBalaya56562)sopsCLI (sops.rops = false) are no longer skipped when no age key is present, so KMS, Vault, PGP, and other key services work in non-strict mode. (#11834 by @Marukome0743).mise-bins, fixing tools such asconda:postgresqlandconda:zstdthat previously failed to start with a missing-DLL error. (#11825 by @JamBalaya56562)-2,-3, …) instead of always using the superseded-1build. (#11807 by @JamBalaya56562)//. (#11782 by @williamsjokvist)!=operator are accepted. (#11828, #11832 by @JamBalaya56562)--filealias where-fmeans--force, andignored_config_pathsnow matches on Windows. (#11789, #11818 by @JamBalaya56562)go.set_gopathdeprecation message is corrected. (#11791, #11799 by @JamBalaya56562, #11835 by @jdx)go listdiagnostics are kept out of default output. (#11816 by @JamBalaya56562)patargument is honored on v1trim_start/trim_end. (#11811 by @JamBalaya56562)sub-N:version prefixes is resolved before subtracting. (#11796 by @JamBalaya56562)-stablesuffix. (#11808 by @JamBalaya56562)Documentation
task_config.shellin thetask.shelldefaults (#11775 by @pynappo).Registry
New Contributors
Full Changelog: jdx/mise@v2026.8.3...v2026.8.4
💚 Sponsor mise
mise is maintained by @jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.
If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.
v2026.8.3: : Flatpak, Font Casks, and Task Precedence FixesCompare Source
This release expands bootstrap package management with per-user Flatpak support and Linux font casks, adds a per-tool pipx registry option and a shim safety setting, and lands a batch of task precedence, lockfile, and Python fixes.
Added
bootstrap: manage per-user Flatpak installations with a new
flatpak-userpackage manager. The existingflatpak:<id>entries stay system-scoped, and you can now declare both scopes in the same config, including the same application ID. (#11757 by @jdx)brew: the built-in
brew-caskmanager now works on Linux for font-only casks, installing fonts under$XDG_DATA_HOME/fontsvia Linuxbrew. Non-font casks on Linux fail with a clear unsupported-platform error. (#11758 by @jdx)pipx: add a per-tool
registry_urloption so version listing andlatestresolution can target a private PyPI-style index without changing the globalpipx.registry_url. The latest-version cache is keyed by registry URL to avoid cross-registry reuse. (#11754 by @jdx)shim: add a
not_found_system_fallbacksetting (MISE_NOT_FOUND_SYSTEM_FALLBACK, defaulttrue). Setting it tofalseprevents a shim for a missing tool from silently falling back to a same-named binary onPATH, failing loudly instead — useful for hardened environments that pin an explicit allowlist of tools. (#11755 by @richid)Fixed
[tasks.<name>]definitions now take precedence over a same-named task from an included TOML file instead of being silently discarded. Metadata-only inline blocks overlay the included command rather than replacing it. (#11734 by @jdx)mise.local.tomlnow overlays the command-bearing definition from a lower file instead of wiping out itsrun. Command-bearing higher-precedence tasks still fully replace the lower one. (#11745 by @jdx)double_dash="required"again accept values passed after--, which had regressed to being rejected. (#11729 by @jdx)postinstallare now applied to explicitly requested runtime versions (e.g.mise install solidity@0.8.2) that carry registry defaults, instead of being skipped. (#11550 by @risu729)lockfile = truenow creates missing project lockfiles duringmise use,mise install, and upgrade flows. An unset setting continues to update existing lockfiles only. (#11746 by @jdx)mise locknow preserves the python-build-standalone artifact already recorded for each platform instead of churning the lockfile to the newest build. Usemise lock --bumpto advance the PBS build explicitly. (#11747 by @jdx)minimum_release_agenow use GitHub'spublished_attimestamp rather than the commitcreated_at, so a newly published release pointing at an older commit no longer bypasses the filter. Applies across Aqua, GitHub, Ubi, SPM, Pipx, and GitHub-backed core tools. (#11756 by @jdx)mise usenow keeps an already-sorted[tools]table alphabetically ordered. (#11713 by @jdx)~in thehomesetting. (#11752 by @xqm32)npm link <package-name>(and itsnpm lnalias) now triggers an auto-reshim, since it installs a package globally. (#11748 by @cheezmil)minimum_release_agewarning during shell completions. (#11727 by @beisenherz)New Contributors
Full Changelog: jdx/mise@v2026.8.2...v2026.8.3
💚 Sponsor mise
mise is maintained by @jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.
If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.
v2026.8.2: : Declarative System BootstrapCompare Source
This release turns
mise bootstrapinto a full declarative host-provisioning system: alongside packages, mise can now converge privileged files, Linux users and groups, systemd services, Docker Compose projects, and firewall rules — all with plan/apply/status workflows, secret handling, and the ability to run over SSH against remote hosts. It also makes Ruby'sruby.compile=falsea strict precompiled-only mode and lands a batch of install and lockfile fixes.Highlights
mise bootstrapgains a Terraform-style declarative model. A newmise bootstrap planpreviews changes with table or JSON output and detailed exit codes, and each resource type has its ownapply/statuscommands that converge only when something actually differs.mise bootstrap remote, including automatic detection of the target's OS/arch/libc and signature-verified download of the matching mise binary.Added
mise bootstrap planpreviews what bootstrap would change before applying, with table or--jsonoutput and optional--detailed-exitcode(0 = no changes, 2 = changes, 1 = error). Resources have stable identities, dependency graphs, and validation for duplicates, missing dependencies, and cycles. (#11669 by @jdx)[bootstrap.files]and[bootstrap.directories], with content (inline or from a source), ownership, mode, and explicitpresent/absentstate. Writes are atomic, removal is opt-in (and requiresrecursive = truefor non-empty directories), and privileged work runs through hidden helpers that never expose file content in argv or logs. (#11674 by @jdx)[bootstrap.secrets]references sensitive values through environment variables so nothing is stored in config, and managed files withtemplate = truecan render them via{{ secret(name="...") }}.mise bootstrap secrets statusreports availability without revealing values, and--prompt-secretsprompts securely for anything missing. (#11680 by @jdx)[bootstrap.users]and[bootstrap.groups], with create/update/remove, supplementary groups, home handling, and explicitstate = "absent". Accounts converge before the files that reference them, and UID/GID collisions fail closed. (#11681 by @jdx)[bootstrap.services]for running/stopped, enabled/disabled, and masked state. Managed files and directories can setnotifyto triggerreload,restart, orreload_or_restarthandlers, but only after a real file change. (#11688 by @jdx)[bootstrap.compose]for running, stopped, and absent states, with pull/build/recreate/wait policies, one-shot services, orphan/volume/image removal, and explicit dependencies. Convergence compares live container runtime and health to the rendered Compose model (Compose v2 only). (#11689 by @jdx)[bootstrap.linux.firewall]with nftables, firewalld, and UFW backends (backend = "auto"). Includes SSH-lockout protection (default-deny requires a covering allow rule orallow_lockout = true), drift detection, and preservation of undeclared rules unlessexclusiveis set. (#11694 by @jdx)mise bootstrap remote, targeting a named[bootstrap.remote.hosts]inventory or ad-hocuser@hosttargets. mise archives and stages your project, provisions a compatible mise binary on the host, runs bootstrap with forwarded flags, and cleans up staging afterward. (#11690 by @jdx)mise_bin,remote_mise, orbootstrap_command. (#11693 by @jdx)Changed
ruby.compile = falseis now a strict precompiled-only mode, matchingpython.compile. Installs error withno precompiled ruby foundinstead of silently falling back to ruby-build, and version listings (mise ls-remote ruby, fuzzy resolution) are filtered to versions that actually have a precompiled binary for your platform. Previouslyfalsewas a no-op after precompiled binaries became the default in 2026.8.0. Unset andcompile = trueare unchanged; Windows is unaffected. (#11710 by @jdx)task.auto_infer(e.g.task.auto_infer = ["node"]) instead of running whenever experimental features are enabled. Explicit mise tasks always take precedence over inferred package scripts on name and alias collisions. (#11706 by @jdx)Fixed
:any_skip_relocationbottles no longer leave unresolved@@HOMEBREW_*@@placeholders in scripts and config files. That tag now only skips binary linkage relocation while text placeholders are still replaced. (#11665 by @jdx)mise lock --bumpnow errors instead of writing an incomplete lockfile when a version bump would drop platform coverage that the previous locked version had. Best-effort skips are retained for platforms a tool never supported. (#11664 by @jdx)upload_time_iso_8601timestamp instead of the timezone-naiveupload_time, which previously made freshly released packages appear up to ~24h younger and over-gated them underminimum_release_age. (#11662 by @Guria)pacman -Qis now parsed underLC_ALL=Cso missing-package detection works in non-English locales; previously[bootstrap.packages]could bail on a translated "was not found" message. (#11673 by @rarandeyo)incompletemarkers when an external link (from uv, nvm, pyenv, nodenv, or Homebrew) is confirmed healthy, somise whereno longer treats a working external version as incomplete after an interrupted install. (#11172 by @risu729)--no longer hijacks task argument completion after usage v5.mise run <task> -- <TAB>again offers the task's declared choices instead of falling back to filenames, while still forwarding extra arguments. (#11711 by @jdx)binsmetadata to pick the correct provider before falling back to incidental executables, fixing cases where invoking thenpmshim could run Node's bundled npm instead of the configured npm version. (#11666, #11671, #11676, #11677, #11678 by @jdx)New Contributors
Full Changelog: jdx/mise@v2026.8.1...v2026.8.2
💚 Sponsor mise
mise is maintained by @jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.
If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.
v2026.8.1: : Task Cache Goes Remote, Affected Tasks, and Config ErgonomicsCompare Source
This release rounds out mise's experimental task artifact cache with size/age limits, inspection tooling, and a full local-plus-remote cache backend (including authenticated CI caching), adds experimental
mise run --affectedfor monorepos, and lands a batch of config, upgrade, and install fixes.Highlights
mise run --affectedruns only the tasks in monorepo projects touched by your Git changes, using workspace dependency graphs, global task inputs, and provider lockfile attribution to decide what is affected.--fileand--pathare interchangeable across the commands that write config, so you no longer have to remember which name each subcommand expects.Added
task: experimental
mise run --affectedselects and runs only the tasks in projects affected by Git changes, combining the workspace dependency graph,global_inputs, and provider lockfile diffs. Base and head revisions can be overridden with--affected-base/--affected-headorMISE_AFFECTED_*. Includes JSON output and an--explainbreakdown of why each task was selected. (#11590, #11587, #11589, #11591, #11593 by @jdx)task: remote task cache. A composite store layers local and remote backends, reading local first and promoting remote hits, then committing locally before mirroring writes so a remote failure never loses a local hit. Requests are hardened, verified, streamed, and support read/write access modes. (#11622, #11623, #11624, #11626, #11627 by @jdx)
task: authenticated remote cache. Credentials resolve in fixed precedence: an explicit bearer token, a global-only token file (
MISE_TASK_CACHE_REMOTE_TOKEN_FILE), then GitHub Actions OIDC whenMISE_TASK_CACHE_REMOTE_OIDC_AUDIENCEis set. HTTPS is enforced except for loopback development endpoints. (#11625, #11653 by @jdx)task:
task.cache_max_sizeandtask.cache_max_agesettings cap the task output cache independently of the global prune age, evicting least-recently-accessed entries after writes and rejecting expired entries on restore. (#11610 by @jdx)task: inspect and selectively clear the cache with
mise cache task <task>(table or--json, reporting stored size, restorable bytes, saved time, last access, and outputs) andmise cache clear --task <task>, which removes only that task's entries without touching your working-tree outputs. (#11604 by @jdx)task:
mise run --task-cache-explain <task>prints a structural breakdown of what feeds a task's cache key (input categories, counts, env/var names and presence, platform) without emitting secret-derived hashes, and works under--dry-run. Companion changes report cache miss reasons, cache statistics, resolved cache paths, and add JSON explanation output. (#11595, #11597, #11599, #11600, #11601 by @jdx)task: cache artifacts are now checksum-verified and cache declarations are audited on load. (#11605, #11617 by @jdx)
config:
--fileand--pathare now interchangeable across the commands that write config:mise use,mise set,mise unuse,mise unset,mise config get, andmise config set. (#11577, #11616, #11631, #11640 by @JamBalaya56562)mise use --file mise.local.toml node@22 mise set --path mise.local.toml FOO=barupgrade:
mise upgrade --no-prunekeeps the version being replaced instead of uninstalling it, so external references such as virtualenvs built from a mise-managed Python keep working. Also works with--bump. (#11639 by @JamBalaya56562)env: on Windows, mise now warns when the generated PATH exceeds the ~8191-character length at which
cmd.exesilently drops the variable, which otherwise makes every command appear unrecognized. (#11643 by @JamBalaya56562)vfox: Lua plugins gain
strip_components = 1onarchiver.decompressplus sortedfile.list,file.glob, andfile.move, letting plugins flatten versioned archive roots and rename executables portably without shelling out. (#11652 by @jdx)Fixed
{{ exec(...) | split(pat=': ') | last }}and selectors resolved from templates no longer fail config loading. (#11580 by @JamBalaya56562)--path <dir>is given, and no longer write the global config into aconf.ddrop-in. (#11571, #11609, #11633 by @JamBalaya56562)mise upgrade --bumpnow applies every eligible tool bump in the same config file instead of letting the last save overwrite earlier ones, and preserves successful bumps when another tool in the file fails to install. (#11572 by @Marukome0743)latestpointing at the removed version; mise rebuilds valid symlinks (or removes dangling ones) after cleanup. (#11579 by @Marukome0743)watchman-diagzipapp) now relocate correctly with long Linuxbrew prefixes. (#11632 by @Marukome0743)Documentation
node.mirror_urlexample. (#11615, #11637 by @jdx; #11642 by @JamBalaya56562; #11377, #11460 by @Bartok9)Full Changelog: jdx/mise@v2026.8.0...v2026.8.1
💚 Sponsor mise
mise is maintained by @jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.
If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.
v2026.8.0: : 15% faster shims, multi-language workspaces, and precompiled RubyCompare Source
This release makes mise noticeably faster on Linux x64: shims have 15% lower latency, while config-aware commands are 8–11% faster in local release-to-release benchmarks. It also significantly expands the experimental monorepo task workflow with dependency inference across Cargo, uv (Python), Go, and Node workspaces, and makes precompiled Ruby binaries the default.
⚡ Performance: up to 15% lower latency
Official checksum-verified Linux x64 GNU binaries were compared on an AMD Ryzen 9 7950X3D using an isolated offline fixture with warm filesystem caches (20 warmups and 200 measured runs per command):
tasks lsenv -s bashcurrentsettings--helpversionregistryRelease downloads are smaller as well:
.tar.xz.tar.gz.tar.zstThe raw executable file is 2.5% larger because of the BOLT file layout, despite its smaller allocated sections and compressed artifacts. Shim dispatch was measured in two reversed-order 300-run rounds. These are whole-release results against v2026.7.18, so they include all changes between the releases rather than isolating BOLT alone.
Highlights
mise tasks graphdiscovers projects and internal dependency edges from Cargo, uv, Go, and Node workspace metadata without needing the underlying toolchain installed, and--explainattributes every project, edge, and task field to its source.Added
task: Cargo workspaces are now inferred for the task graph. mise parses root and member
Cargo.tomlfiles (nocargobinary required) to buildcargo:<package>projects and internal edges from normal, dev, build, target-specific, renamed, and inheritedworkspace = truepath dependencies, with provenance surfaced in graph output. (#11554 by @jdx)task: uv (Python) workspaces are inferred from
pyproject.toml. When[tool.uv.workspace]is present, member globs and exclusions defineuv:<package>projects and edges come from[tool.uv.sources]workspace = true/ localpathentries across main, optional, dependency-group, and legacy dev dependencies — again without invokinguvor Python. (#11556 by @jdx)task: Go workspaces are discovered from
go.workusedirectives and each module'sgo.mod, registering stablego:<module-path>projects without running thegobinary. Dependency ordering is supplied explicitly via[monorepo.projects]overrides. (#11559 by @jdx)task: workspace providers can now contribute task suggestions. The Node provider imports supported
inputs,outputs,cache, anddependsOnmetadata from matchingturbo.jsonentries for inferred package scripts, trackingturbo.jsonas a task definition source. Unsupported Turbo expressions are left unset. (#11543 by @jdx)task:
mise tasks graph --explainshows provider and metadata-source provenance for every inferred project, dependency edge, task, and provider-suggested field, and--jsonnow serializes the same attribution. Config overrides are labeled asconfigurationrather than misattributed to inference. (#11547 by @jdx)task:
mise watchgains a per-taskwatch.no_vcs_ignoreoption so tasks can watch sources that are excluded by.gitignore(such as generated files). VCS ignores stay enabled by default to avoid scanning broad build directories; one opted-in task enables it for the combined watch process. (#11535 by @Marukome0743)task: groundwork for affected-project task selection: mise can now resolve affected Git base/head revisions (with
MISE_AFFECTED_BASE/MISE_AFFECTED_HEADoverrides and CI auto-detection for GitHub Actions and GitLab), map changed files to the workspace projects that own them, and expand that set through transitive reverse-dependency edges across providers. (#11585, #11569, #11583 by @jdx)Changed
ruby.compileis unset — installs tryjdx/rubybinaries first and fall back to a source build when none are available. Setruby.compile = trueto force a source build as before. (#11584 by @jdx)Fixed
--path <dir>now targets a config file inside that directory foruse,unuse,set,unset,dotfiles add, and thesystemsubcommands. Previously--pathwas silently discarded when the current directory already had a config in scope, somise unuse --path ../othercould remove a tool from the wrong file. (#11575 by @JamBalaya56562)mise runstops starting new work, exits with status 130, and no longer printsno exit statusortask failed, while still allowing post-dependency cleanup to run. ([#11511](https://redirect.github.com/jdxConfiguration
📅 Schedule: (in timezone Europe/Paris)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.