Update GitHub Actions workflows.

.config/mise.toml

@@ -24,6 +24,16 @@ java = 'corretto-11'
 golangci-lint = "2.15.0" # See note about about overrides if you need to customize this.
 "npm:yarn" = "1.22.22"
 
+[hooks]
+# Also install project dependencies during local setup. CI runs this explicitly
+# after mise-action because hook failures only produce warnings.
+postinstall = "mise deps install"
+
+[deps.pulumi-java]
+# Let the selected CLI choose Java's version. With no sources or outputs this
+# also checks warm caches, without running before every mise exec or mise run.
+run = "pulumi plugin install language java"
+
 [settings]
 experimental = true # Required for Go binaries (e.g. pulumictl).
 lockfile = false

.github/workflows/build_provider.yml

@@ -72,10 +72,12 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ steps.app-auth.outputs.token }}
           # only saving the cache in the prerequisites job
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       # Based on https://github.com/actions/cache/blob/main/examples.md#go---modules
       - name: Get GOCACHE
         id: gocache

.github/workflows/build_sdk.yml

@@ -74,10 +74,12 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ steps.app-auth.outputs.token }}
           # only saving the cache in the prerequisites job
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       - name: Setup Go Cache
         if: matrix.language == 'go' || contains(matrix.language, 'go')
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7

.github/workflows/license.yml

@@ -54,10 +54,12 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ steps.app-auth.outputs.token }}
           # only saving the cache in the prerequisites job
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       - run: make prepare_local_workspace
         continue-on-error: true
         env:

.github/workflows/lint.yml

@@ -54,9 +54,11 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         cache_save: false # A different job handles caching our tools.
+    - name: Install project dependencies
+      run: mise deps install
     - name: prepare workspace
       continue-on-error: true
       run: make prepare_local_workspace

.github/workflows/main-post-build.yml

@@ -68,10 +68,12 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ steps.app-auth.outputs.token }}
           # only saving the cache in the prerequisites job
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       - name: Setup Go Cache
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:

.github/workflows/master.yml

@@ -58,7 +58,7 @@ jobs:
       version: ${{ needs.prerequisites.outputs.version }}
       languages: '["nodejs","python","dotnet","go","java"]'
       runs-on: ubuntu-latest
-      mise-version: 2026.3.7
+      mise-version: 2026.10.21
       checkout-submodules: 'false'
 
   post_build:

.github/workflows/prerequisites.yml

@@ -84,10 +84,12 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         # only saving the cache in the prerequisites job
         cache_save: true
+    - name: Install project dependencies
+      run: mise deps install
     - name: Setup Go Cache
       if: inputs.acceptance_fanout
       uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6

.github/workflows/publish.yml

@@ -72,9 +72,11 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         cache_save: false
+    - name: Install project dependencies
+      run: mise deps install
     - name: Configure AWS Credentials
       uses: aws-actions/configure-aws-credentials@e1253824e5c10ff9df46874f81ed3ec929e19cfd # v6.3.0
       with:
@@ -173,10 +175,12 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         # only saving the cache in the prerequisites job
         cache_save: false
+    - name: Install project dependencies
+      run: mise deps install
     - name: Setup Node
       uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
       with:

.github/workflows/run-acceptance-tests.yml

@@ -102,9 +102,11 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         cache_save: false
+    - name: Install project dependencies
+      run: mise deps install
     - name: Restore Go Cache
       uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
       with:
@@ -172,9 +174,11 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         cache_save: false
+    - name: Install project dependencies
+      run: mise deps install
     - name: Restore Go Cache
       uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
       with:
@@ -258,7 +262,7 @@ jobs:
       version: ${{ needs.prerequisites.outputs.version }}
       languages: '["nodejs","python","dotnet","go","java"]'
       runs-on: ubuntu-latest
-      mise-version: 2026.3.7
+      mise-version: 2026.10.21
       checkout-submodules: 'false'
 
   comment-notification:

.github/workflows/test.yml

@@ -70,10 +70,12 @@ jobs:
         MISE_ENV: test
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         # also save this cache since we are using a different mise env.
         cache_save: true
+    - name: Install project dependencies
+      run: mise deps install
     - name: Prepare local workspace
       run: make prepare_local_workspace
       env:

.github/workflows/upgrade-bridge.yml

@@ -105,10 +105,12 @@ jobs:
       env:
         MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
       with:
-        version: 2026.3.7
+        version: 2026.10.21
         github_token: ${{ steps.app-auth.outputs.token }}
         # only saving the cache in the prerequisites job
         cache_save: false
+    - name: Install project dependencies
+      run: mise deps install
     - name: Call upgrade provider action
       if: github.event_name == 'workflow_dispatch'
       uses: pulumi/pulumi-upgrade-provider-action@12996503de2aaddd72c7426efc43331a8970894f # v0.0.19

.github/workflows/upgrade-provider.yml

@@ -72,10 +72,12 @@ jobs:
         env:
           MISE_FETCH_REMOTE_VERSIONS_TIMEOUT: 30s
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ steps.app-auth.outputs.token }}
           # only saving the cache in the prerequisites job
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       - name: Install upgrade-provider
         run: go install github.com/pulumi/upgrade-provider@${{ inputs.upgradeProviderVersion || 'main' }}
         shell: bash

.github/workflows/verify-release.yml

@@ -85,9 +85,11 @@ jobs:
       - name: Setup mise
         uses: jdx/mise-action@8d3b0ba20a9cea7b883d922ea958553c941ab082
         with:
-          version: 2026.3.7
+          version: 2026.10.21
           github_token: ${{ secrets.GITHUB_TOKEN }}
           cache_save: false
+      - name: Install project dependencies
+        run: mise deps install
       - name: Setup Go Cache
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with: