ci: add mise version+sha256 pinning to CI

.github/renovate-tracked-deps.json

@@ -1,12 +1,63 @@
 {
   ".github/renovate.json5": {
-    "renovate-config-presets": ["grafana/flint"]
+    "renovate-config-presets": [
+      "grafana/flint"
+    ]
+  },
+  ".github/workflows/acceptance-tests.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/build.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/github-pages.yaml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/java-version-matrix-tests.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/lint.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/native-tests.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/nightly-benchmarks.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/release.yml": {
+    "regex": [
+      "mise"
+    ]
+  },
+  ".github/workflows/test-release-build.yml": {
+    "regex": [
+      "mise"
+    ]
   },
   ".mise/envs/native/mise.toml": {
-    "mise": ["java"]
+    "mise": [
+      "java"
+    ]
   },
   ".mvn/wrapper/maven-wrapper.properties": {
-    "maven-wrapper": ["maven"]
+    "maven-wrapper": [
+      "maven"
+    ]
   },
   "benchmarks/pom.xml": {
     "maven": [
@@ -64,13 +115,21 @@
     ]
   },
   "integration-tests/it-exporter/it-exporter-test/pom.xml": {
-    "maven": ["io.prometheus:it-common", "io.prometheus:it-exporter"]
+    "maven": [
+      "io.prometheus:it-common",
+      "io.prometheus:it-exporter"
+    ]
   },
   "integration-tests/it-exporter/it-no-protobuf-test/pom.xml": {
-    "maven": ["io.prometheus:it-common", "io.prometheus:it-exporter"]
+    "maven": [
+      "io.prometheus:it-common",
+      "io.prometheus:it-exporter"
+    ]
   },
   "integration-tests/it-exporter/pom.xml": {
-    "maven": ["io.prometheus:integration-tests"]
+    "maven": [
+      "io.prometheus:integration-tests"
+    ]
   },
   "integration-tests/it-pushgateway/pom.xml": {
     "maven": [
@@ -108,13 +167,20 @@
       "npm:renovate",
       "protoc"
     ],
-    "regex": ["ghcr.io/super-linter/super-linter", "grafana/flint"]
+    "regex": [
+      "ghcr.io/super-linter/super-linter",
+      "grafana/flint"
+    ]
   },
   "mvnw": {
-    "maven-wrapper": ["maven-wrapper"]
+    "maven-wrapper": [
+      "maven-wrapper"
+    ]
   },
   "mvnw.cmd": {
-    "maven-wrapper": ["maven-wrapper"]
+    "maven-wrapper": [
+      "maven-wrapper"
+    ]
   },
   "pom.xml": {
     "maven": [
@@ -188,7 +254,9 @@
     ]
   },
   "prometheus-metrics-config/pom.xml": {
-    "maven": ["io.prometheus:client_java"]
+    "maven": [
+      "io.prometheus:client_java"
+    ]
   },
   "prometheus-metrics-core/pom.xml": {
     "maven": [
@@ -210,7 +278,10 @@
     ]
   },
   "prometheus-metrics-exporter-httpserver/pom.xml": {
-    "maven": ["io.prometheus:client_java", "io.prometheus:prometheus-metrics-exporter-common"]
+    "maven": [
+      "io.prometheus:client_java",
+      "io.prometheus:prometheus-metrics-exporter-common"
+    ]
   },
   "prometheus-metrics-exporter-opentelemetry-otel-agent-resources/pom.xml": {
     "maven": [
@@ -319,10 +390,15 @@
     ]
   },
   "prometheus-metrics-model/pom.xml": {
-    "maven": ["io.prometheus:client_java", "io.prometheus:prometheus-metrics-config"]
+    "maven": [
+      "io.prometheus:client_java",
+      "io.prometheus:prometheus-metrics-config"
+    ]
   },
   "prometheus-metrics-otel-support/pom.xml": {
-    "maven": ["io.prometheus:client_java"]
+    "maven": [
+      "io.prometheus:client_java"
+    ]
   },
   "prometheus-metrics-parent/pom.xml": {
     "maven": [
@@ -343,10 +419,14 @@
     ]
   },
   "prometheus-metrics-tracer/pom.xml": {
-    "maven": ["io.prometheus:client_java"]
+    "maven": [
+      "io.prometheus:client_java"
+    ]
   },
   "prometheus-metrics-tracer/prometheus-metrics-tracer-common/pom.xml": {
-    "maven": ["io.prometheus:prometheus-metrics-tracer"]
+    "maven": [
+      "io.prometheus:prometheus-metrics-tracer"
+    ]
   },
   "prometheus-metrics-tracer/prometheus-metrics-tracer-initializer/pom.xml": {
     "maven": [
@@ -369,7 +449,9 @@
     ]
   },
   "simpleclient-archive/integration_tests/it_common/pom.xml": {
-    "maven": ["io.prometheus:integration_tests"]
+    "maven": [
+      "io.prometheus:integration_tests"
+    ]
   },
   "simpleclient-archive/integration_tests/it_exemplars_otel_agent/pom.xml": {
     "maven": [
@@ -444,7 +526,10 @@
     ]
   },
   "simpleclient-archive/simpleclient_graphite_bridge/pom.xml": {
-    "maven": ["io.prometheus:client_java", "io.prometheus:simpleclient"]
+    "maven": [
+      "io.prometheus:client_java",
+      "io.prometheus:simpleclient"
+    ]
   },
   "simpleclient-archive/simpleclient_hibernate/pom.xml": {
     "maven": [

.github/workflows/acceptance-tests.yml

@@ -14,5 +14,8 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
       - name: Run acceptance tests
         run: mise run acceptance-test

.github/workflows/build.yml

@@ -13,6 +13,9 @@ jobs:
         with:
           persist-credentials: false
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
       - name: Cache local Maven repository
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:

.github/workflows/github-pages.yaml

@@ -39,6 +39,8 @@ jobs:
           fetch-depth: 0
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
         with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
           cache: "false"
       - name: Setup Pages
         id: pages

.github/workflows/java-version-matrix-tests.yml

@@ -33,6 +33,9 @@ jobs:
 
       - name: Set up mise
         uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
 
       - name: Cache local Maven repository
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3

.github/workflows/lint.yml

@@ -22,6 +22,9 @@ jobs:
 
       - name: Setup mise
         uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
 
       - name: Lint
         env:

.github/workflows/native-tests.yml

@@ -15,6 +15,8 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
         with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
           working_directory: .mise/envs/native
       - name: Run native tests
         working-directory: .mise/envs/native

.github/workflows/nightly-benchmarks.yml

@@ -35,6 +35,9 @@ jobs:
 
       - name: Setup mise
         uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
 
       - name: Cache local Maven repository
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3

.github/workflows/release.yml

@@ -26,6 +26,8 @@ jobs:
 
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
         with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
           cache: false
 
       - name: Build release version

.github/workflows/test-release-build.yml

@@ -19,6 +19,9 @@ jobs:
           fetch-tags: "true"
           fetch-depth: 0
       - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1
+        with:
+          version: v2026.2.11
+          sha256: 3e1baedb9284124b770d2d561a04a98c343d05967c83deb8b35c7c941f8d9c9a
       - name: Cache local Maven repository
         uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with: