coming soon to the mise docs

I'm leaning towards satire lol, it's pretty good

jactionlint 2.2 is out. 28 new rules (133 → 161), mostly for script injection, token permissions, pinning and runner limits. • --changed-since: only report what a PR changed • shell syntax errors, even without shellcheck • flags jobs whose permissions are too narrow for their actions • checks GitHub’s Actions lock file • uvx jactionlint Some new rules are on by default, so read the notes before upgrading. github.com/jdx/jactionlint/r…

16TiB saved since i started using it

this is crazy, it's just the past 5 months

jactionlint 2.0 is out. actionlint, maintained, plus zizmor-style security audits in one binary. Rules: actionlint 17, zizmor 41, jactionlint 130+ (not entirely comparable, but still) • `--fix` that converges • dependabot.yml and composite action.yml linting • your `# zizmor: ignore` comments keep working • baseline mode to adopt it gradually github.com/jdx/jactionlint

i will say that it's not the best result, but the way things are going anymore i'm sure that's temporary

new in mise: tools that keep themselves up to date. set auto_update on a global tool and mise upgrades it right before it runs. optionally run a daemon to do upgrades in the background. mise.jdx.dev/dev-tools/#auto…

learn something new every day

i finally figured out a way to support secrets in mise via fnox in a way that i like—i've spent 2 years thinking about how to do secrets in mise and until now have not really been happy about how it worked. 2 things are different, first it is designed around tasks which gives granular control over which task gets which secrets. second is that it (optionally) uses the fnox daemon so there doesn't need to be any filesystem caching or poor perf by needing to fetch the secrets over and over. i wouldn't call it done, this is labeled experimental, there's still more work to be done, but this feels like the right direction for sure.

hk 2.5.0 is out! No major features, this is a snow leopard release fixing lots of bugs/perf. hk is really taking off in terms of downloads. It’s approaching 100k/day which isn’t far off from where mise was 3 months ago. github.com/jdx/hk/releases/t…

my riff on @georgekobaidze's awesome github template github.com/jdx dev.to/georgekobaidze/i-turn…

brew has the same problem! if this is successful brew should also bootstrap via packslip

the anthem for everyone struggling with cargo's 100gb+ target/ directories from rust git worktrees: pray silence for mr-boxington 📦🍓 github.com/jdx/mr-boxington