chore(ci/mise): add lockfile, simplify caching behavior

.github/actions/setup/action.yml

@@ -18,35 +18,10 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: Resolve mise cache key
-      id: mise-cache-key
-      shell: bash
-      run: |
-        node <<'JS' >> "$GITHUB_OUTPUT"
-        const { createHash } = require("node:crypto");
-        const { readFileSync } = require("node:fs");
-
-        const packageJson = JSON.parse(readFileSync("package.json", "utf8"));
-        const payload = {
-          bun: readFileSync(".bun-version", "utf8").trim(),
-          mise: readFileSync("mise.toml", "utf8").trim(),
-          node: packageJson.devEngines?.runtime,
-          pnpm: packageJson.packageManager,
-        };
-        const digest = createHash("sha256")
-          .update(JSON.stringify(payload))
-          .digest("hex");
-        console.log(`hash=${digest}`);
-        JS
-
     - name: Install toolchains
       uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d # v4
       with:
         version: 2026.7.0
-        install: true
-        cache_key: >-
-          {{cache_key_prefix}}-{{platform}}-{{version}}-${{
-          steps.mise-cache-key.outputs.hash }}
 
     - name: Resolve pnpm store path
       if: inputs.dependency-cache == 'true'

CONTRIBUTING.md

@@ -6,7 +6,7 @@ Bun monorepo for exploring the next generation of the Supabase CLI and local dev
 
 ### Tool versions
 
-This repo pins the versions of Node, Bun, Go, pnpm, and golangci-lint that contributors are expected to build against, and uses [`mise`](https://mise.jdx.dev/) — a polyglot version manager — to install and activate Node, Bun, Go, pnpm, and golangci-lint automatically. If you don't already have these tools installed, `mise` is a great way to get up and running quickly.
+This repo pins the versions of Node, Bun, Go, pnpm, and golangci-lint that contributors are expected to build against, and uses [`mise`](https://mise.jdx.dev/) — a polyglot version manager — to install and activate them automatically. If you don't already have these tools installed, `mise` is a great way to get up and running quickly.
 
 #### Installing mise
 
@@ -38,7 +38,7 @@ Then install the pinned tool versions:
 mise install
 ```
 
-After `mise trust`, `mise` resolves the versions this repo expects from a handful of files, rather than hardcoding them all in one place:
+`mise install` resolves the versions this repo expects from a handful of files, rather than hardcoding them all in one place:
 
 | Tool | Version source |
 | --- | --- |

mise.toml

@@ -1,6 +1,9 @@
+min_version = '2026.7.0'
+
 [tools]
 go = "1.25.11"
 "go:github.com/golangci/golangci-lint/v2/cmd/golangci-lint" = "2.1.6"
 
 [settings]
 idiomatic_version_file_enable_tools = ["node", "bun", "pnpm"]
+lockfile = true