feat: enable mise mono repo (#612)

* feat: enable mise mono repo

* fix: set config_roots

* ci: update mise action for software/publish

* chore: generate mise.lock

* ci: only update `ci.yml` with mise 2026.8.6 (no lock)

* ci: prefer `mise run`

.github/workflows/ci.yml

@@ -30,15 +30,14 @@ jobs:
         run: .mise/tasks/yucca-api/check-migration-order origin/main
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@cd24790a7f5f6439ac32cc94f5523cb2de8bfa8c # use-mise-action-v1.1.0
-        env:
-          # mise downloads tools from GitHub releases; anonymous requests hit
-          # API rate limits with four parallel jobs.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - run: mise prepare
+        uses: jdx/mise-action@dad1bfd3df957f44999b559dd69dc1671cb4e9ea # v4.2.1
+        with:
+          version: 2026.8.6
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+      - run: mise run prepare
 
       - name: Run checks
-        run: mise check
+        run: mise run check
 
   k8s-validate:
     name: Validate Kubernetes Surface
@@ -50,11 +49,10 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@cd24790a7f5f6439ac32cc94f5523cb2de8bfa8c # use-mise-action-v1.1.0
-        env:
-          # mise downloads tools from GitHub releases; anonymous requests hit
-          # API rate limits with four parallel jobs.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: jdx/mise-action@dad1bfd3df957f44999b559dd69dc1671cb4e9ea # v4.2.1
+        with:
+          version: 2026.8.6
+          github_token: ${{ secrets.GITHUB_TOKEN }}
 
       # helm template + kubeconform per chart, then flux-local builds the whole
       # kubernetes/ tree the way Flux would. No cluster involved. One retry:
@@ -73,11 +71,10 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@cd24790a7f5f6439ac32cc94f5523cb2de8bfa8c # use-mise-action-v1.1.0
-        env:
-          # mise downloads tools from GitHub releases; anonymous requests hit
-          # API rate limits with four parallel jobs.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: jdx/mise-action@dad1bfd3df957f44999b559dd69dc1671cb4e9ea # v4.2.1
+        with:
+          version: 2026.8.6
+          github_token: ${{ secrets.GITHUB_TOKEN }}
       # The stack (dev images, k3s) is heavy; the stock runner has ~14GB free,
       # so drop the biggest unused toolchains up front.
       - name: Free runner disk space
@@ -118,11 +115,10 @@ jobs:
           persist-credentials: false
 
       - name: Setup Mise
-        uses: immich-app/devtools/actions/use-mise@cd24790a7f5f6439ac32cc94f5523cb2de8bfa8c # use-mise-action-v1.1.0
-        env:
-          # mise downloads tools from GitHub releases; anonymous requests hit
-          # API rate limits with four parallel jobs.
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        uses: jdx/mise-action@dad1bfd3df957f44999b559dd69dc1671cb4e9ea # v4.2.1
+        with:
+          version: 2026.8.6
+          github_token: ${{ secrets.GITHUB_TOKEN }}
       # Paths from the GitHub-hosted image; absent on a self-hosted runner, and
       # -n so a runner without passwordless sudo fails instead of hanging.
       - name: Free runner disk space

.github/workflows/publish.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Setup Mise
         uses: immich-app/devtools/actions/use-mise@cd24790a7f5f6439ac32cc94f5523cb2de8bfa8c # use-mise-action-v1.1.0
-      - run: mise prepare
+      - run: mise run prepare
 
       - name: Publish
         run: |

.mise/config.toml

@@ -1,3 +1,8 @@
+monorepo_root = true
+
+[monorepo]
+config_roots = ["ansible/ceph", "ansible/talos"]
+
 [tools]
 node = "25.9.0"
 pnpm = "10.28.1"

default.nix

@@ -1,6 +1,6 @@
 { pkgs ? import (fetchTarball {
-    url = "https://github.com/NixOS/nixpkgs/archive/b51242d7d43689db2f3be91bd05d5b24fbb469c4.tar.gz";
-    sha256 = "0ldd02kkfzndk0x98zsg992gqz84ip18hvrq01wws6p96ki176rb";
+    url = "https://github.com/NixOS/nixpkgs/archive/e8be7818e19ada32105a8af937a6a473b38167ca.tar.gz";
+    sha256 = "06sil8mb0psrx1x49yfrxxr7sd6fqjz77amyx7bhr7rp3216gpyh";
   }) {},
 
   # Playwright v1.59.1
@@ -28,7 +28,7 @@ in pkgs.mkShell {
     openssl.dev
     python3
     (writeShellScriptBin "fish" ''
-      exec ${pkgs.fish}/bin/fish -C 'mise activate fish | source' "$@"
+      exec ${pkgs.fish}/bin/fish -C '${pkgs.mise}/bin/mise activate fish | source' "$@"
     '')
   ];
 
@@ -37,7 +37,7 @@ in pkgs.mkShell {
     export NIX_LD_LIBRARY_PATH="${nix-ld-libs}/lib"
 
     export MISE_NODE_COMPILE=false
-    eval "$(mise activate bash)"
+    eval "$(${pkgs.mise}/bin/mise activate bash)"
 
     export PLAYWRIGHT_BROWSERS_PATH=${unstablePkgs.playwright-driver.browsers}
     export PLAYWRIGHT_SKIP_VALIDATE_HOST_REQUIREMENTS=true