chore(mise): upgrade local tools

Automated mise tool upgrades from local config.

mise-managed tools:
- `action-validator`
- `actionlint`
- `editorconfig-checker`
- `ghalint`
- `lychee`
- `pinact`
- `pipx:gh-action-pulse`
- `prek`
- `rumdl`
- `shellcheck`
- `shfmt`
- `tombi`
- `uv`
- `yamlfmt`
- `yamllint`
- `zizmor`

Command: `mise upgrade --bump --local action-validator actionlint editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor`

<details>
<summary>Version changelog (4 tools)</summary>

| Tool | Requested | Installed |
|------|-----------|-----------|
| `pinact` | `4.1.1` → `5.0.0` | `4.1.1` → `5.0.0` |
| `prek` | `0.5.2` → `0.5.3` | `0.5.2` → `0.5.3` |
| `rumdl` | `0.2.71` → `0.2.73` | `0.2.71` → `0.2.73` |
| `tombi` | `1.5.4` → `1.5.5` | `1.5.4` → `1.5.5` |

</details>

<details>
<summary>Release notes (4 tools)</summary>

<details>
<summary>pinact: `4.1.1` → `5.0.0` (suzuki-shunsuke/pinact)</summary>

### v5.0.0

suzuki-shunsuke/pinact@v4.1.1...v5.0.0

[Upgrade Guide](https://github.com/suzuki-shunsuke/pinact/blob/v5.0.0/docs/upgrade_guide/v5.md)

## 🤖 pinact is now AI friendly

v5 is about coding agents. An agent that is asked about pinact, or that hits a pinact error in CI, has until now had to answer from its training data, from the source code, or from whichever version of the website it happened to land on. v5 gives it three things so that it answers from the pinact that is actually installed:

#1708 An Agent Skill
#1708 `pinact docs`: the documentation, embedded in the binary
#1705 `pinact json-schema`: the JSON Schema of the configuration file, embedded in the binary

### An Agent Skill

```sh
gh skill install suzuki-shunsuke/pinact pinact
```

The skill carries no documentation of its own, deliberately. It is installed separately from the binary, so anything copied into it would go stale, and an agent would confidently describe a flag or an error code of a version that isn't the one on the machine. Instead the skill tells the agent to run `pinact docs list` and `pinact docs show <name>` before answering, so the answer always comes from the installed pinact and the skill and the binary can never disagree about a version.

It adds only the few things an agent gets wrong unless it is told: that `pinact run` edits files and `--check` is the way to look without touching them, that `--update` changes which version a workflow uses, and that the exit codes 1 and 2 are findings rather than pinact failing.

### `pinact docs`

```console
$ pinact docs list          # the name and the description of every document, as JSON
$ pinact docs show config   # one document
$ pinact docs show codes/005
```

The documents are embedded in the binary, so there is nothing to fetch. An agent doesn't need network access to read them, doesn't have to guess which branch or tag of the repository to read, and cannot land on the documentation of a versi… (truncated)

</details>
<details>
<summary>prek: `0.5.2` → `0.5.3` (j178/prek)</summary>

### v0.5.3

## Release Notes

Released on 2026-09-13.

### Enhancements

- Add PEP 740 attestations for PyPI releases ([#2705](j178/prek#2705))
- Add a `check-jsonc` builtin hook ([#2682](j178/prek#2682))
- Allow disabling automatic uv installation ([#2702](j178/prek#2702))

### Bug fixes

- Fix Julia additional dependency specifiers ([#2703](j178/prek#2703))
- Update `granit-parser` to fix YAML flow indentation ([#2707](j178/prek#2707))

### Contributors

- @​clbarnes
- @​j178
- @​tisonkun

## Install prek 0.5.3

### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.sh | sh
```

### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/j178/prek/releases/download/v0.5.3/prek-installer.ps1 | iex"
```

### Install prebuilt binaries via Homebrew

```sh
brew install prek
```

## Download prek 0.5.3

|  File  | Platform | Checksum |
|--------|----------|----------|
| [prek-aarch64-apple-darwin.tar.gz](https://github.com/j178/prek/releases/download/v0.5.3/prek-aarch64-apple-darwin.tar.gz) | Apple Silicon macOS | [checksum](https://github.com/j178/prek/releases/download/v0.5.3/prek-aarch64-apple-darwin.tar.gz.sha256) |
| [prek-x86_64-apple-darwin.tar.gz](https://github.com/j178/prek/releases/download/v0.5.3/prek-x86_64-apple-darwin.tar.gz) | Intel macOS | [checksum](https://github.com/j178/prek/releases/download/v0.5.3/prek-x86_64-apple-darwin.tar.gz.sha256) |
| [prek-aarch64-pc-windows-msvc.zip](https://github.com/j178/prek/releases/download/v0.5.3/prek-aarch64-pc-windows-msvc.zip) | ARM64 Windows | [checksum](https://github.com/j178/prek/releases/download/v0.5.3/prek-aarch64-pc-windows-msvc.zip.sha256) |
| [prek-x86_64-pc-windows-msvc.zip](https://github.com/j178/prek/releases/downloa… (truncated)

</details>
<details>
<summary>rumdl: `0.2.71` → `0.2.73` (rvben/rumdl)</summary>

### v0.2.72

### Added

- **MD090**: add rule flagging horizontal rules directly before headings ([09dcae5](rvben/rumdl@09dcae5))

### Fixed

- **MD013**: end a sentence after a closing marker run of any shape ([e63206c](rvben/rumdl@e63206c))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.72-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.72-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.72-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.72-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-aarch64-unknown-linux-musl.tar.gz) | Linux ARM64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-aarch64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.72-x86_64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-apple-darwin.tar.gz) | macOS x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.72/rumdl-v0.2.72-x86_64-apple-darwin.tar.gz.sha256) |
| [rumdl-v0.2.72-aarch64-apple-darwin.tar.gz](https://github.com/rvben/rumdl/… (truncated)

### v0.2.73

### Fixed

- **MD022,MD031,MD032,MD058**: count a comment-only line as a blank line ([b394e30](rvben/rumdl@b394e30))
- **MD057**: stop requiring index.md for directory links in filesystem mode ([c04ae4e](rvben/rumdl@c04ae4e))
- **MD051**: validate fragments in repository-absolute cross-file links ([ead5f39](rvben/rumdl@ead5f39))
- **parser**: stop reading headings inside blocks whose body is not Markdown ([59958b1](rvben/rumdl@59958b1))
- **MD077**: carry a code block's interior indentation when reindenting its fence ([00c578d](rvben/rumdl@00c578d))

## Downloads

| File | Platform | Checksum |
|------|----------|----------|
| [rumdl-v0.2.73-x86_64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-x86_64-unknown-linux-gnu.tar.gz) | Linux x86_64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-x86_64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.73-x86_64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-x86_64-unknown-linux-musl.tar.gz) | Linux x86_64 (musl) | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-x86_64-unknown-linux-musl.tar.gz.sha256) |
| [rumdl-v0.2.73-aarch64-unknown-linux-gnu.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-aarch64-unknown-linux-gnu.tar.gz) | Linux ARM64 | [checksum](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-aarch64-unknown-linux-gnu.tar.gz.sha256) |
| [rumdl-v0.2.73-aarch64-unknown-linux-musl.tar.gz](https://github.com/rvben/rumdl/releases/download/v0.2.73/rumdl-v0.2.73-aarch64-unknown-linux-musl.tar.gz) | L… (truncated)

</details>
<details>
<summary>tombi: `1.5.4` → `1.5.5` (tombi-toml/tombi)</summary>

### v1.5.5

<!-- Release notes generated using configuration in .github/release.yml at v1.5.5 -->

## What's Changed
### 🛠️ Other Changes
* fix(lsp): stop logging empty workspace diagnostics by @​ya7010 in tombi-toml/tombi#2177
* fix(vscode): persist status bar item visibility by @​ya7010 in tombi-toml/tombi#2178
* fix(lsp): skip workspace diagnostics when lsp.diagnostic is disabled by @​ya7010 in tombi-toml/tombi#2179

**Full Changelog**: tombi-toml/tombi@v1.5.4...v1.5.5

</details>

</details>

Modified files:
- `.mise.toml`

Author: github-actions[bot]

.mise.toml

@@ -6,13 +6,13 @@ action-validator = "0.9.0"
 actionlint = "1.7.12"
 editorconfig-checker = "4.0.1"
 ghalint = "1.5.6"
-pinact = "4.1.1"
+pinact = "5.0.0"
 "pipx:gh-action-pulse" = { version = "1.4.0", uvx = "true" }
-prek = "0.5.2"
-rumdl = "0.2.71"
+prek = "0.5.3"
+rumdl = "0.2.73"
 shellcheck = "0.11.0"
 shfmt = "3.14.1"
-tombi = "1.5.4"
+tombi = "1.5.5"
 uv = "0.12.13"
 yamlfmt = "0.21.0"
 yamllint = "1.38.0"