Skip to content

PREQ-5497: Bump mise to 2026.4.23 to fix jfrog-cli registry lookup#249

Merged
tomverin merged 2 commits into
masterfrom
bugfix/tom/PREQ-5497-bump-mise
May 1, 2026
Merged

PREQ-5497: Bump mise to 2026.4.23 to fix jfrog-cli registry lookup#249
tomverin merged 2 commits into
masterfrom
bugfix/tom/PREQ-5497-bump-mise

Conversation

@tomverin
Copy link
Copy Markdown
Contributor

@tomverin tomverin commented Apr 28, 2026

Summary

  • Bumps mise from 2026.3.17 to 2026.4.23 across all 5 files that pin the version
  • Fixes intermittent jfrog-cli installation failures caused by mise-versions.jdx.dev returning empty/not-found responses
  • Affects: promote/action.yml, build-yarn/action.yml, build-poetry/action.yml, build-npm/action.yml, .github/workflows/test-shell-scripts.yml

Context

Jira: PREQ-5497

The promote workflow (and potentially other workflows) fails installing jfrog-cli via mise because mise-versions.jdx.dev intermittently returns empty / "Tool not found" for jfrog-cli. The reporter confirmed that mise 2026.4.23 resolves the issue.

Test plan

  • CI pipeline passes on this branch (mise installs jfrog-cli successfully)
  • Verify promote workflow succeeds on a downstream repo (e.g. sonar-scanner-integration-tester)

mise-versions.jdx.dev intermittently returns empty/not-found for
jfrog-cli when using mise 2026.3.17. Updating to 2026.4.23 fixes
the flaky registry resolution.

Bumped in all 5 files that pin the mise version:
- promote/action.yml
- build-yarn/action.yml
- build-poetry/action.yml
- build-npm/action.yml
- .github/workflows/test-shell-scripts.yml
@hashicorp-vault-sonar-prod
Copy link
Copy Markdown

hashicorp-vault-sonar-prod Bot commented Apr 28, 2026

PREQ-5497

@sonarqubecloud
Copy link
Copy Markdown

@tomverin tomverin marked this pull request as ready for review April 30, 2026 13:26
@tomverin tomverin requested a review from a team as a code owner April 30, 2026 13:26
Copilot AI review requested due to automatic review settings April 30, 2026 13:26
@sonar-review-alpha
Copy link
Copy Markdown
Contributor

sonar-review-alpha Bot commented Apr 30, 2026

Summary

This PR bumps mise from 2026.3.17 to 2026.4.23 across 5 GitHub Actions files to fix intermittent jfrog-cli installation failures. The mise 2026.4.23 release resolves an issue where mise-versions.jdx.dev was returning empty/not-found responses for jfrog-cli lookups.

Changes: Simple version string updates in 5 files (promote/action.yml, build-npm/action.yml, build-poetry/action.yml, build-yarn/action.yml, .github/workflows/test-shell-scripts.yml). Each file has one identical change on the jdx/mise-action step.

What reviewers should know

What to check:

  • All 5 files are updated consistently (✓ they are — diff shows identical changes)
  • Version string is correct (2026.4.23 matches what was tested/confirmed)
  • No related dependencies or workflows need updating (mise is only referenced in these locations)

Risk level: Low. This is a straightforward version bump within the same major version. The author has confirmed the fix works. Primary risk would be if 2026.4.23 itself has undiscovered issues, but that's mitigated by the test plan (CI pass + downstream validation).

Test focus: Main validation happens in CI (mise must successfully install jfrog-cli), and follow-up testing on a downstream repo (sonar-scanner-integration-tester) should confirm the promote workflow actually works end-to-end.


  • Generate Walkthrough
  • Generate Diagram

🗣️ Give feedback

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the pinned mise version used by several composite GitHub Actions and a workflow, in order to address intermittent jfrog-cli installation failures caused by registry lookup issues.

Changes:

  • Bump mise from 2026.3.17 to 2026.4.23 in four composite actions.
  • Bump mise from 2026.3.17 to 2026.4.23 in the ShellSpec test workflow.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
promote/action.yml Updates the mise version used during the promote action setup.
build-yarn/action.yml Updates the mise version used for Yarn build action setup.
build-poetry/action.yml Updates the mise version used for Poetry build action setup.
build-npm/action.yml Updates the mise version used for npm build action setup.
.github/workflows/test-shell-scripts.yml Updates the mise version used in the shell script test workflow.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copy link
Copy Markdown
Contributor

@sonar-review-alpha sonar-review-alpha Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The 5 changed files are updated correctly and consistently. However, config-npm/action.yml was missed — it still pins jdx/mise-action at version: 2026.3.7 (line 93), which is even older than the version being replaced here. This means any workflow that invokes config-npm directly (including the test workflow, which runs ./config-npm before the separate mise step) will still call mise 2026.3.7 internally. If that version has the same jfrog-cli registry lookup bug, the fix is incomplete for those paths.

🗣️ Give feedback

@tomverin tomverin merged commit 8254c75 into master May 1, 2026
21 checks passed
@tomverin tomverin deleted the bugfix/tom/PREQ-5497-bump-mise branch May 1, 2026 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants