build(deps): bump jdx/mise-action from 4.2.0 to 4.2.5

[dependabot]

Bumps jdx/mise-action from 4.2.0 to 4.2.5.

Release notes

Sourced from jdx/mise-action's releases.

v4.2.5: Resilient mise downloads with automatic retries

A small patch release that makes setup more resilient to transient network failures when downloading mise.

Fixed

Retry mise downloads after transient failures (#597 by @​jdx)

The download helpers previously made a single curl or wget attempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see #596).

Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.

Full Changelog: jdx/mise-action@v4.2.4...v4.2.5

v4.2.4: Reliable locking detection under forced color

A small patch release that fixes locking-support detection when workflows force colored output.

Fixed

Detect mise install --locked reliably under forced color (#580 by @​scop)

When colored output was forced globally (for example via CLICOLOR_FORCE=1), ANSI escape codes in mise install --help prevented the action from matching --locked in the help text, so locking support was reported as unavailable even on versions of mise that supported it.

The help probe now runs with NO_COLOR=1 in its environment, which overrides CLICOLOR_FORCE and guarantees plain-text output for the feature detection — regardless of the surrounding workflow's color settings.

Full Changelog: jdx/mise-action@v4.2.3...v4.2.4

v4.2.3: Restore mise PATH propagation

A patch release that restores mise's PATH propagation to subsequent workflow steps — without reintroducing the full-PATH snapshot behavior that v4.2.1 fixed.

Fixed

Export mise PATH entries to subsequent steps (#575) by @​jdx

v4.2.1 stopped exporting the complete PATH returned by mise env --json into GITHUB_ENV, which correctly prevented snapshotting the runner's environment into subsequent steps. However, that also dropped mise-produced PATH entries — tool shims, [env] _.path directories, and similar — that workflows relied on after the setup step. See #565.

The action now computes only the prefix that mise prepended to the existing PATH and forwards those directories individually through GITHUB_PATH. This preserves mise's configured ordering, composes cleanly with PATH changes from other actions, and never persists the runner's full PATH through GITHUB_ENV. The dotenv fallback path (used with older mise versions) also strips PATH= lines and re-derives additions from mise env --json.

A new export_path input (default true) lets workflows keep regular env exports while opting out of PATH changes:

- uses: jdx/mise-action@v4
  with:
    export_path: false # keep env vars, skip mise PATH additions

Full Changelog: jdx/mise-action@v4.2.2...v4.2.3

v4.2.2: Zstd tar fallback for older runners

A small patch release that fixes archive selection on runners with an older tar and corrects a stale default in the README.

... (truncated)

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

---

4.2.5 - 2026-08-12

🐛 Bug Fixes

• retry mise downloads after transient failures (#597) by @​jdx in #597

---

4.2.4 - 2026-08-01

🐛 Bug Fixes

• locking support detection with force-colored output (#580) by @​scop in #580

---

4.2.3 - 2026-07-24

🐛 Bug Fixes

• export mise path entries to subsequent steps (#575) by @​jdx in #575

---

4.2.2 - 2026-07-24

🐛 Bug Fixes

• (release-plz) exit when git-cliff produces no version bump (#566) by @​jdx in #566
• ensure tar supports Zstd (#569) by @​JackMyers001 in #569

📚 Documentation

• update default value of cache_key_prefix (#570) by @​muzimuzhi in #570

New Contributors

• @​muzimuzhi made their first contribution in #570
• @​JackMyers001 made their first contribution in #569

---

4.2.1 - 2026-07-16

🐛 Bug Fixes

• verify mise downloads with signed checksums (#548) by @​jdx in #548
• exclude PATH from environment export (#556) by @​jdx in #556

🔍 Other Changes

... (truncated)

Commits

• 3c2e0cf chore: release v4.2.5 (#598)
• 9dda395 fix: retry mise downloads after transient failures (#597)
• 9d2b311 chore(deps): update github/codeql-action action to v4.37.6 (#593)
• 4213fbb chore(deps): update jdx/mise-action action to v4.2.4 (#594)
• 672dbd2 chore(deps): update zizmorcore/zizmor-action action to v0.6.2 (#595)
• 5159765 chore(deps): lock file maintenance (#592)
• c75b4f6 chore(deps): update jdx/mise-action action to v4.2.3 (#590)
• 367cc0d chore(deps): update github/codeql-action action to v4.37.3 (#589)
• 90e6e66 chore(deps): update zizmorcore/zizmor-action action to v0.6.1 (#591)
• 7350bb8 chore(deps): lock file maintenance (#588)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Update CI to jdx/mise-action v4.2.5 to reduce setup flakes and fix PATH propagation. Previously on v4.2.0, downloads failed without retry and PATH could be snapshotted; now downloads retry and only mise-added PATH entries are exported, with reliable --locked detection under forced color.

Review notes

• Workflow pins jdx/mise-action to commit 3c2e0cf (v4.2.5). Subsequent steps no longer inherit the full runner PATH; if any step relied on that, add explicit PATH entries.

^{Written for commit 5a63b65. Summary will update on new commits.}