diff --git a/.editorconfig b/.editorconfig
index 69d2a4d5f..53bc044fa 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -4,7 +4,7 @@ root = true
 max_line_length = 100
 indent_size = 2
 
-[{version-rules.xml,maven-wrapper.properties,checkstyle.xml,docker-compose.yaml,docker-compose.yml,Dockerfile,example_target_info.json,mise.toml,mvnm,mvnw.cmd,generate-protobuf.sh,super-linter.env,.gitleaksignore}]
+[{version-rules.xml,maven-wrapper.properties,checkstyle.xml,docker-compose.yaml,docker-compose.yml,Dockerfile,example_target_info.json,mise.toml,mvnm,mvnw.cmd,generate-protobuf.sh,super-linter.env,.gitleaksignore,*.json5}]
 max_line_length = 200
 
 [{grafana-dashboard-*.json,.editorconfig}]
diff --git a/.github/renovate.json5 b/.github/renovate.json5
index 3b6beecd9..67c8c137f 100644
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@@ -4,9 +4,28 @@
   platformCommit: "enabled",
   automerge: true,
   ignorePaths: [
-    "**/simpleclient-archive/**", // old projects
+    "**/simpleclient-archive/**",
+    // old projects
     // agent resources packages an OTel API that is the minimum required API version
     "**/prometheus-metrics-exporter-opentelemetry-otel-agent-resources/pom.xml",
   ],
   labels: ["dependencies"],
+  packageRules: [
+    {
+      matchPackageNames: ["jdx/mise"],
+      groupName: "mise",
+      schedule: ["before 4am on monday"],
+    },
+  ],
+  customManagers: [
+    {
+      customType: "regex",
+      description: "update mise",
+      managerFilePatterns: ["/(^|/)(workflow-templates|\\.(?:github|gitea|forgejo)/(?:workflows|actions))/.+\\.ya?ml$/", "/(^|/)action\\.ya?ml$/"],
+      datasourceTemplate: "github-release-attachments",
+      packageNameTemplate: "jdx/mise",
+      depNameTemplate: "mise",
+      matchStrings: ["jdx/mise-action.*\\n\\s*with:\\s*\\n\\s*version: [\"']?(?<currentValue>v[.\\d]+)[\"']?\\s*\\n\\s*sha256: [\"']?(?<currentDigest>\\w+)[\"']?"],
+    },
+  ],
 }
diff --git a/.github/workflows/acceptance-tests.yml b/.github/workflows/acceptance-tests.yml
index f4c6350e1..bd1605254 100644
--- a/.github/workflows/acceptance-tests.yml
+++ b/.github/workflows/acceptance-tests.yml
@@ -14,5 +14,8 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Run acceptance tests
         run: mise run acceptance-test
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index acdf2a14a..0ebfec054 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -13,6 +13,9 @@ jobs:
         with:
           persist-credentials: false
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Cache local Maven repository
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with:
diff --git a/.github/workflows/github-pages.yaml b/.github/workflows/github-pages.yaml
index 4bd0a3255..fb1b9a4c3 100644
--- a/.github/workflows/github-pages.yaml
+++ b/.github/workflows/github-pages.yaml
@@ -39,6 +39,8 @@ jobs:
           fetch-depth: 0
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
         with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
           cache: "false"
       - name: Setup Pages
         id: pages
diff --git a/.github/workflows/lint-rest.yml b/.github/workflows/lint-rest.yml
index 1b5713148..e0d3904e0 100644
--- a/.github/workflows/lint-rest.yml
+++ b/.github/workflows/lint-rest.yml
@@ -14,5 +14,8 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Lint
         run: mise run lint-rest
diff --git a/.github/workflows/native-tests.yml b/.github/workflows/native-tests.yml
index 1177bb9d5..1c6ac8b05 100644
--- a/.github/workflows/native-tests.yml
+++ b/.github/workflows/native-tests.yml
@@ -14,6 +14,9 @@ jobs:
           persist-credentials: false
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
         env:
           MISE_ENV: native
       - name: Run native tests
diff --git a/.github/workflows/test-release-build.yml b/.github/workflows/test-release-build.yml
index 3a808e3e6..349e2fc5a 100644
--- a/.github/workflows/test-release-build.yml
+++ b/.github/workflows/test-release-build.yml
@@ -17,6 +17,9 @@ jobs:
         with:
           persist-credentials: false
       - uses: jdx/mise-action@eb2f5cb41b0a8175dad2f797e3daca6fe7795a19 # v2.4.2
+        with:
+          version: v2025.7.19
+          sha256: 73c7d061d1654e64cc8d98bfaa52939e0f034292d70b7b735a3795d6a293dfda
       - name: Cache local Maven repository
         uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4
         with: