From dc736d9d95b4b379e020a9389ca339671c2a8a81 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 05:47:39 +0000
Subject: [PATCH 1/2] chore(container): update image
 ghcr.io/devsecninja/dotfiles-devcontainer to a5c39d7 [automerge]

---
 .devcontainer/devcontainer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 16d5841e..59b9e723 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:3e867c18788692292ecbc16d19af9924c8174fd4ee955b8098cf7b170c3852ea",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:a5c39d7bffd4c1e69564ef8d71a5838b893fd79c50a6a439edbfb88bdefb9e19",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"

From 2e051405533c886a6ef33f191d6264a51535164c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 25 Sep 2026 05:47:52 +0000
Subject: [PATCH 2/2] chore(github-release): update release jdx/mise to
 v2026.9.5 [automerge]

---
 .devcontainer/devcontainer.json | 2 +-
 .github/workflows/ci.yaml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 59b9e723..16d5841e 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -6,7 +6,7 @@
   // fresh, correctly detecting the runtime environment (CI, Codespaces, etc.)
   // Pinned by digest only (no tag): the devcontainers CLI cannot parse a
   // combined `:tag@sha256:...` reference, so Renovate keeps just the digest.
-  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:a5c39d7bffd4c1e69564ef8d71a5838b893fd79c50a6a439edbfb88bdefb9e19",
+  "image": "ghcr.io/devsecninja/dotfiles-devcontainer@sha256:3e867c18788692292ecbc16d19af9924c8174fd4ee955b8098cf7b170c3852ea",
   "features": {
     "ghcr.io/devcontainers/features/git-lfs:1": {
       "version": "latest"
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 3713833a..57dace4a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -524,7 +524,7 @@ jobs:
       # Keep in sync with MISE_VERSION above. The env context is not available
       # in a reusable-workflow `with:` input, so this pin is tracked separately.
       # renovate: datasource=github-releases depName=jdx/mise
-      mise-version: "2026.9.1"
+      mise-version: "2026.9.5"
       test-dirs: "tests/bash/"
       check-name: "Bash Test Results (Bats)"