Repository navigation
chore(deps): update jdx/packslip action to v1.9.1 - #15083
Merged
Merged
Conversation
Contributor
|
This PR does not match any of the 1 configured review trigger rule. |
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
mise-en-dev
added a commit
that referenced
this pull request
Oct 28, 2026
<!-- entire-trail-link-start --> https://entire.com/gh/jdx/-/trails/2943/changes/mise/1083 <!-- entire-trail-link-end --> ### 🚀 Features - **(bootstrap)** print a hook's description or one line instead of its whole script by @jdx in [#15106](#15106) - **(dotfiles)** add create_if_missing to seed a file once by @jdx in [#15080](#15080) - **(dotfiles)** set permissions on a file a merge entry creates by @jdx in [#15087](#15087) - **(dotfiles)** merge into JSONC files such as VS Code's settings.json by @jdx in [#15077](#15077) - **(http)** add ipv4_only setting for hosts that fail over IPv6 by @jdx in [#15057](#15057) - **(shell)** add --all to `mise shell --unset` by @jdx in [#15088](#15088) - **(uninstall)** add --local to remove a project's installed tools by @jdx in [#15079](#15079) - **(vars)** add --json and --json-extended to mise vars by @jdx in [#15069](#15069) - add --no-global and --project scope flags, deprecate --local by @jdx in [#15081](#15081) ### 🐛 Bug Fixes - **(aqua)** stop warning "invalid aqua tool" for custom registry packages by @jdx in [#15048](#15048) - **(backends)** handle empty lock directories when switching backends by @zeitlinger in [#15060](#15060) - **(config)** treat an empty system_packages.elevate_with as "never elevate" by @jdx in [#15049](#15049) - **(config)** stop warning about a version-file link to a sibling version file by @jdx in [#15058](#15058) - **(core)** point node@lts at Node.js 26 by @jdx in [#15105](#15105) - **(gem)** quote paths in generated wrapper scripts by @jdx in [#15055](#15055) - **(github)** ask for fewer releases when api.github.com times out listing them by @jdx in [#15078](#15078) - **(lock)** install pipx tools when only the current platform is locked by @jdx in [#15091](#15091) - **(packslip)** log versions held back by minimum_release_age at debug level by @jdx in [#15056](#15056) - **(prune)** keep only the running version of a tool started through a moved link by @jdx in [#15113](#15113) - **(release)** include shell completions in Debian packages by @gilesw in [#15074](#15074) - **(remote-source)** validate git ref in remote git sources by @Huge in [#14832](#14832) - **(version)** never report a latest version older than the running one in version --json by @jdx in [#15068](#15068) - hide the Windows console for prompt-started tool updates by @yusoofsh in [#15038](#15038) ### 📚 Documentation - **(secrets)** note that fnox daemon reads need fnox 1.43.0 by @jdx in [#15115](#15115) ### 📦️ Dependency Updates - update github actions by @renovate[bot] in [#15039](#15039) - update ubuntu docker tag to resolute-20261006 by @renovate[bot] in [#15040](#15040) - update rust crates by @renovate[bot] in [#15041](#15041) - update github actions by @renovate[bot] in [#15046](#15046) - lock file maintenance by @renovate[bot] in [#15043](#15043) - update mise tools by @renovate[bot] in [#15042](#15042) - update rust crates to v1.12.0 by @renovate[bot] in [#15050](#15050) - lock file maintenance by @renovate[bot] in [#15062](#15062) - update aube to v2.8.4 by @renovate[bot] in [#15072](#15072) - update swatinem/rust-cache digest to d1527c8 by @renovate[bot] in [#15064](#15064) - lock file maintenance by @renovate[bot] in [#15073](#15073) - update rust crates to v1.12.0 by @renovate[bot] in [#15065](#15065) - stop lock file maintenance from downgrading crates by @jdx in [#15086](#15086) - update jdx/packslip action to v1.9.1 by @renovate[bot] in [#15083](#15083) - update rust crate jdx-tar to v1.1.2 by @renovate[bot] in [#15089](#15089) - lock file maintenance by @renovate[bot] in [#15085](#15085) - lock file maintenance by @renovate[bot] in [#15093](#15093) - update dependency node to v26 by @renovate[bot] in [#15095](#15095) - lock file maintenance by @renovate[bot] in [#15097](#15097) - lock file maintenance by @renovate[bot] in [#15099](#15099) - lock file maintenance by @renovate[bot] in [#15100](#15100) ### 📦 Registry - fix docuum and android-sdk test expectations by @jdx in [#15067](#15067) - add aqua for oxfmt by @scop in [#15092](#15092) ### New Contributors - @gilesw made their first contribution in [#15074](#15074) - @yusoofsh made their first contribution in [#15038](#15038) ## 📦 Aqua Registry Updates ### Updated Packages (9) - [`aquaproj/aqua-registry-updater`](https://github.com/aquaproj/aqua-registry-updater) - [`lintnet/lintnet`](https://github.com/lintnet/lintnet) - [`suzuki-shunsuke/ghproj`](https://github.com/suzuki-shunsuke/ghproj) - [`suzuki-shunsuke/github-comment`](https://github.com/suzuki-shunsuke/github-comment) - [`suzuki-shunsuke/rgo`](https://github.com/suzuki-shunsuke/rgo) - [`suzuki-shunsuke/sort-issue-template`](https://github.com/suzuki-shunsuke/sort-issue-template) - [`suzuki-shunsuke/tfmv`](https://github.com/suzuki-shunsuke/tfmv) - [`suzuki-shunsuke/tfprovidercheck`](https://github.com/suzuki-shunsuke/tfprovidercheck) - [`suzuki-shunsuke/tfrstate`](https://github.com/suzuki-shunsuke/tfrstate)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
https://entire.com/gh/jdx/-/trails/2968/changes/mise/1105
This PR contains the following updates:
v1.9.0→v1.9.1v1.11.1(+3)Release Notes
jdx/packslip
v1.9.1: : Stop trusting compromised eMudhra intermediate CA certificatesCompare Source
packslip now ships an updated TLS trust store and certificate verifier. The private keys for eight eMudhra intermediate CA certificates were compromised, and this release stops trusting them. The manifest format and verification rules have not changed.
Fixed
rustls-webpki0.103.16 andwebpki-root-certs1.0.10. Browsers already block the compromised eMudhra intermediates (details), and the packslip CLI and thejdx/packslipAction now reject HTTPS connections that chain through them too. Connections that relied on those certificates will now fail. If you use packslip as a library, the change only applies to your own build once you runcargo update -p rustls-webpki -p webpki-root-certs. #246 (@jdx)Full Changelog: jdx/packslip@v1.9.0...v1.9.1
Configuration
📅 Schedule: (in timezone America/Chicago)
* * * * 2)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.