build(deps): bump jdx/mise-action from 5.0.0 to 5.0.1

[dependabot]

Bumps jdx/mise-action from 5.0.0 to 5.0.1.

Release notes

Sourced from jdx/mise-action's releases.

v5.0.1: Verify cached mise binaries before running them

mise-action now checks the integrity of an already-installed mise binary before running it. This fixes a security issue that was reported privately.

Fixed

• An existing mise binary is verified before it is run. When a mise binary is already on the runner (for example, restored from cache or in mise_dir), the action now checks it before calling it. If you set a sha256 input, the binary must match that checksum and report the requested version. Otherwise, it must match the signed release checksums for the version being installed. If the check fails, the action prints a warning, deletes the binary and installs the requested release again. Before this fix, the action could run a cached binary before checking it. (#637 by @​jdx)

Changed

Changes to how the action handles an existing binary, also from #637:

• Switching versions uses a full install. If the cached binary doesn't match the requested version, the action downloads and installs that version. It no longer runs mise self-update.
• Unpinned runs always pick a release. Without a version input, the action now selects a release every time, using minimum_release_age, even when mise is already installed. It then checks the existing binary against that release, and reinstalls if the binary doesn't match.
• Older releases need a sha256 input to reuse a cached binary. Some older mise releases have no signed checksums. With the sha256 input set, a cached binary of one of these releases can still be reused without a download. Without it, the action can't verify the binary and installs it again.

Full Changelog: jdx/mise-action@v5.0.0...v5.0.1

Changelog

Sourced from jdx/mise-action's changelog.

Changelog

---

5.1.1 - 2026-10-04

🐛 Bug Fixes

• make GitHub token persistence opt-in (#658) by @​jdx in #658

---

5.1.0 - 2026-10-04

🚀 Features

• output active tool versions (#655) by @​jdx in #655
• add opt-in cache_save_post input (#649) by @​jdx in #649
• add plugins input (#656) by @​jdx in #656

🐛 Bug Fixes

• (cache) keep a cached mise instead of re-downloading when version is unset (#642) by @​jdx in #642
• save cache after inexact cache restore (#646) by @​jdx in #646
• extract mise zip with PowerShell instead of unzip on Windows (#650) by @​jdx in #650
• cache mise binary for caches saved without a version record (#648) by @​jdx in #648

📚 Documentation

• explain the Rust cache caveat and workarounds (#651) by @​jdx in #651
• add matrix and external cache guides; warn on shadowed mise_toml (#654) by @​jdx in #654

⚙️ Miscellaneous Tasks

• add TypeScript 7 alongside TypeScript 6 (#639) by @​jdx in #639
• make the final job depend on every test job (#643) by @​jdx in #643
• roll every check up into the final job (#645) by @​jdx in #645
• remove unneeded @​types/handlebars dependency (#647) by @​jdx in #647

---

5.0.1 - 2026-09-30

🐛 Bug Fixes

• verify cached mise before execution (#637) by @​jdx in #637

---

5.0.0 - 2026-09-28

🚀 Features

• breaking default minimum release age to 24 hours (#632) by @​jdx in 279d505

... (truncated)

Commits

• 7a4e45a chore: release v5.0.1 (#638)
• c4102d4 fix: verify cached mise before execution (#637)
• baf7eb4 chore(deps): update dependency aube to latest (#636)
• c75796c chore(deps): update dependency communique to latest (#635)
• ec2665b chore(deps): update github actions (#633)
• 342b4c0 chore(deps): update dependency aube to latest (#634)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)