Skip to content

update: bump jdx/mise to 2026.10.18 - #338

Merged
garyj merged 1 commit into
masterfrom
renovate/jdx-mise-2026.x
Oct 27, 2026
Merged

garyj merged 1 commit into
masterfrom
renovate/jdx-mise-2026.x

Conversation

@renovate

@renovate renovate Bot commented Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending
jdx/mise patch 2026.10.10 → 2026.10.18 2026.10.20 (+1)

Release Notes

jdx/mise

v2026.10.18

Compare Source

🚀 Features
🐛 Bug Fixes
  • (aqua) make the baked registry encoding deterministic by @​jdx in #​14809
  • (backend) reuse cached conda downloads in locked installs by @​zeitlinger in #​14866
  • (bootstrap) match only an exact bootstrap task by @​jdx in #​14858
  • (brew) tolerate custom Requirement classes in tap formulae by @​jdx in #​14807
  • (config) keep tracked .tool-versions recognized under a filename override by @​jdx in #​14779
  • (dotfiles) keep entries declared in an unselected env config tracked by @​jdx in #​14815
  • (dotfiles) report a saved enrollment under a symlinked parent instead of failing capture by @​jdx in #​14871
  • (e2e) reap background watch process and retry isolated dir cleanup by @​jdx in #​14824
  • (generate) end install-script and task-stubs files with a newline by @​itochan in #​14819
  • (github) skip .netrc credentials on the asset reachability HEAD by @​jdx in #​14786
  • (github) page when mise-versions lists no releases for a repo by @​jdx in #​14877
  • (gitlab) ignore expired glab OAuth2 tokens instead of sending them by @​jdx in #​14873
  • (http) fall back to bundled root certificates when the system store is empty by @​jdx in #​14817
  • (http) extract zip archives that contain read-only files on Windows by @​jdx in #​14869
  • (install) ignore curlrc write-out when downloading in install.sh by @​jdx in #​14830
  • (install) run [hooks].postinstall against the just-installed version by @​jdx in #​14853
  • (java) pick the newest build when installed versions differ only after + by @​jdx in #​14876
  • (lock) prefer the nearest lockfile when an unowned request is ambiguous by @​jdx in #​14818
  • (lock) accept PEP 691 +html content types from PyPI simple indexes by @​jdx in #​14852
  • (lock) keep a .config root's monorepo lockfile next to its config by @​jdx in #​14860
  • (lockfile) keep the Python a pipx tool selects by @​jdx in #​14794
  • (oci) package the rust toolchain in mise oci build by @​jdx in #​14854
  • (packslip) stay quiet about an installed version past the release-age cutoff by @​jdx in #​14835
  • (pipx) find uv's Windows launcher for console scripts ending in .py by @​jdx in #​14825
  • (prune) resolve symlinked Python path in pypi receipts by @​jdx in #​14857
  • (prune) keep a selected Python reached through a minor-version link by @​jdx in #​14874
  • (ruby) don't fail gem installs when mise is not on PATH by @​jdx in #​14850
  • (schema) declare dotfile_groups entry keys and lint the schema with Tombi by @​jdx in #​14810
  • (task) let an empty run_windows skip the task on Windows by @​jdx in #​14859
  • (task) accept mise tasks list as an alias for ls by @​jdx in #​14878
  • (unuse) prune only the named version and say why one is kept by @​jdx in #​14863
📚 Documentation
  • (dotfiles) explain repo-only files, existing repos, and undoing an accidental track by @​jdx in #​14829
  • (dotfiles) explain what add --no-apply, dot diff, and exclude do by @​jdx in #​14862
⚡ Performance
  • (config) check trusted_config_paths after cheaper trust rules by @​jdx in #​14875
📦️ Dependency Updates
📦 Registry
Ci
  • retry windows-lint once and print diagnostics when it fails by @​jdx in #​14820
  • retry the docker image build in the bootstrap linux host test by @​jdx in #​14821
  • use jdx/workflows retry and gpg-import actions by @​jdx in #​14828
New Contributors

v2026.10.17

Compare Source

🚀 Features
  • (bootstrap) accept a shell name in bootstrap.user.login_shell by @​jdx in #​14770
  • (doctor) render templates in check run, description and hint by @​jdx in #​14771
  • (vfox) add RUNTIME.cacheDirPath for plugins by @​jdx in #​14776
🐛 Bug Fixes
  • (aqua) handle unterminated string literals in template lexer by @​Huge in #​14752
  • (env) keep pre-activation PATH entries when the shell deduplicates PATH by @​jdx in #​14772
  • (pipx) don't pick a case-insensitive Python match as the interpreter on macOS by @​jdx in #​14769
  • (release) sign Windows binaries in a separate workflow run by @​jdx in #​14766
  • (task) rehash same-size source edits that restore mtime in content-hash mode by @​jdx in #​14778
📚 Documentation
  • (dotfiles) clarify permissions-only group entries and pruning by @​jdx in #​14768
📦️ Dependency Updates
New Contributors

v2026.10.15

Compare Source

🚀 Features
🐛 Bug Fixes
  • (aqua) find binaries in macOS universal archives by @​jdx in #​14665
  • (aqua) date github_tag versions so minimum_release_age applies by @​jdx in #​14691
  • (backend) warn when minimum_release_age cannot check a version's date by @​jdx in #​14694
  • (conda) report release dates so minimum_release_age applies by @​jdx in #​14693
  • (core) date dotnet, deno and erlang versions for minimum_release_age by @​jdx in #​14692
  • (core) date more ruby, python and rust versions so minimum_release_age applies by @​jdx in #​14697
  • (dotfiles) report copies instead of symlinks for symlink-each on Windows by @​jdx in #​14654
  • (fmt) keep multiline inline tables intact by @​jdx in #​14670
  • (http) retry the install rename on Windows when antivirus holds the files by @​jdx in #​14703
  • (install) extract 7z archives when the data dir contains .. by @​jdx in #​14657
  • (npm) run allow_builds scripts despite ignore-scripts in .npmrc by @​jdx in #​14661
  • (npm) pin aube-lock.yaml so a user's lockfile settings don't break mise lock by @​jdx in #​14659
  • (rust) list channels when GitHub is unreachable behind a mirror by @​jdx in #​14662
  • (shim) keep the version tag in the Windows release mise-shim.exe by @​jdx in #​14656
  • (task) keep task commands working when one task's dir template is broken by @​jdx in #​14680
🚜 Refactor
  • (schema) generate the [deps] and [secrets] schema from their types by @​jdx in #​14658
  • (schema) generate the [daemons] and [daemon_providers] schema from types by @​jdx in #​14663
  • (schema) generate the [hooks] schema from declaration types by @​jdx in #​14666
  • (schema) generate the [bootstrap] raw-value schema from declaration types by @​jdx in #​14668
  • (schema) generate the [tools] option schemas from declaration types by @​jdx in #​14669
  • (schema) generate the [env] and [vars] schema from declaration types by @​jdx in #​14671
  • (schema) generate the multi-shape task field schemas from declaration types by @​jdx in #​14672
📚 Documentation
  • (config) add an interactive mise.toml editor and playground by @​jdx in #​14673
  • (config) hover over keys in every mise.toml example by @​jdx in #​14686
  • (config) turn the mise.toml reference into a key explorer by @​jdx in #​14687
  • (config) show a real example for every mise.toml reference key by @​jdx in #​14690
  • (dotnet) explain how private feeds authenticate by @​jdx in #​14679
  • (schema) describe the remaining bootstrap keys by @​jdx in #​14688
  • (secrets) add setup, CI and migration guidance to the fnox page by @​jdx in #​14675
  • record the landing-page showreel against current mise so its cache fills by @​jdx in #​14685
📦️ Dependency Updates
📦 Registry
  • add release dates to dart, flutter, nim, julia and other http tools by @​jdx in #​14698
Ci
  • (release) publish releases staged before install.ps1 existed by @​jdx in #​14684

v2026.10.14

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
  • (config) move doctor, tool_config, watch_files and wrappers into mise-config by @​jdx in #​14617
  • (config) move the oci and daemons declarations into mise-config by @​jdx in #​14618
  • (config) move alias, min_version and monorepo into mise-config by @​jdx in #​14627
  • (config) declare [tools] in mise-config, keyed by string by @​jdx in #​14631
  • (config) parse mise.toml through MiseTomlDecl by @​jdx in #​14638
  • (env) move env directives and the [env] parser into mise-config by @​jdx in #​14621
  • (task) move the task declaration field types into mise-config by @​jdx in #​14622
  • (task) split TaskDecl from Task by @​jdx in #​14624
  • rename mise-system-config to mise-config by @​jdx in #​14608
📚 Documentation
  • (config) add an interactive mise.toml reference generated from the schema by @​jdx in #​14641
  • (env) explain env_file and _.file find_up are different features by @​jdx in #​14602
⚡ Performance
🧪 Testing
  • (npm) install a popular package in the dependency check by @​jdx in #​14633
  • (schema) check schema/mise.json against the config parser by @​jdx in #​14613
📦️ Dependency Updates
Chore
  • (schema) generate the [history] schema from mise-config by @​jdx in #​14611
  • (schema) generate the task schema from TaskDecl and TaskTemplate by @​jdx in #​14625
  • (schema) generate the whole schema from a top-level MiseTomlDecl by @​jdx in #​14632
  • (schema) generate the [dotfiles] schema from typed entries by @​jdx in #​14644
Ci
  • restore the nextest timeout for the mise-oci blob test by @​jdx in #​14619

v2026.10.13

Compare Source

🚀 Features
  • (bootstrap) template repo url and ref, add clone options by @​jdx in #​14548
  • (bootstrap) expose system_brew_prefix to templates by @​jdx in #​14572
  • (doctor) flag a mise-shim.exe template older than mise by @​jdx in #​14586
  • (ls-remote) list every version range of a registry tool by @​jdx in #​14544
  • (registry) let one backend carry different options per version range by @​jdx in #​14543
  • (shim) render command wrapper values as templates by @​jdx in #​14565
  • (vfox) allow a headers table in the PreInstall result by @​jdx in #​14531
🐛 Bug Fixes
🚜 Refactor
  • (backend) move aqua tests into their own file by @​jdx in #​14556
  • (config) move lockfile tests into their own file by @​jdx in #​14554
  • (config) move config tests into their own file by @​jdx in #​14555
  • (config) move [dotfiles], [dotfile_groups], and [history] types into mise-system-config by @​jdx in #​14569
  • (config) move the [bootstrap] declaration types into mise-system-config by @​jdx in #​14573
  • (core) move progress reports, prompts, and themes into mise-ui by @​jdx in #​14558
  • (core) move system::sudo into mise-ui by @​jdx in #​14560
  • (daemons) move the daemon declarations, ports, presets, and runtime into mise-daemons by @​jdx in #​14583
  • (lock) split run_with_installed into phases by @​jdx in #​14559
  • (oci) move the registry client, layers, and image layout into mise-oci by @​jdx in #​14582
  • (system) split apply_locked_with_scope into phases by @​jdx in #​14557
  • (system) make package managers independent of mise's config and toolset by @​jdx in #​14564
  • (system) move system package managers into mise-system-packages by @​jdx in #​14567
  • (system) reach the config layer through a registered host by @​jdx in #​14575
  • (system) move the bootstrap, dotfiles, and history modules into mise-system by @​jdx in #​14581
📚 Documentation
⚡ Performance
◀️ Revert
  • Revert "chore(deps): pin zipsign-api to 0.2.1" by @​jdx in baafe33
📦️ Dependency Updates
📦 Registry
Chore
Ci
Security
  • (config) ignore [settings] from untrusted project configs by @​jdx in #​14538
New Contributors

v2026.10.12

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
📦️ Dependency Updates
📦 Registry
Chore
📦 Aqua Registry Updates
Updated Packages (3)

v2026.10.11

Compare Source

🚀 Features
  • (bootstrap) add --upgrade to upgrade packages and tools by @​jdx in #​14433
  • (env) add --paths to list the PATH entries mise manages by @​jdx in #​14429
  • (install) download pinned versions from mise.jdx.dev with GitHub fallback by @​jdx in #​14446
🐛 Bug Fixes
  • (aqua) read GitHub-hosted aqua registries from raw.githubusercontent.com by @​jdx in #​14470
  • (backend) build packslip after versions_host_applies was removed by @​jdx in 8bdf9ae
  • (backend) resolve packslip prefixes like latest by @​jdx in #​14467
  • (bootstrap) render incoming direction for ufw interface rules by @​jdx in #​14480
  • (dotfiles) show planned file actions before the apply prompt by @​jdx in #​14430
  • (dotfiles) speed up flaky objects_at test by @​jdx in #​14439
  • (dotfiles) capture changed files of copy-mode groups with dot add --changed by @​jdx in #​14436
  • (exec) ask mise-versions for GitHub releases when auto-installing from exec and shims by @​jdx in #​14458
  • (github) stop falling back to api.github.com when mise-versions misses by @​jdx in #​14460
  • (github) read the checksum-mismatch hint's digest from mise-versions by @​jdx in #​14481
  • (github) list git tags from mise-versions instead of api.github.com by @​jdx in #​14461
  • (github) verify attestations from mise-versions without api.github.com fallbacks by @​jdx in #​14469
  • (lock) ignore the host's implicit compile default for other lock platforms by @​jdx in #​14432
  • (lock) download artifacts for provenance checks from github.com, not the API by @​jdx in #​14465
  • (oci) require root for apt bootstrap packages and show dpkg output on failure by @​jdx in #​14447
  • (pipx) preserve uv graph locking during global upgrades by @​wislertt in #​14426
  • (ruby) look up the latest ruby-build release through mise-versions by @​jdx in #​14471
  • (self-update) read mise releases from mise-versions and download from github.com by @​jdx in #​14464
  • (shim) allow a few repeated fallback handoffs in one process by @​jdx in #​14475
  • (upgrade) leave lazy tools that are not installed to their first run by @​ryanrhughes in #​14422
  • (upgrade) skip version lookups for lazy tools a bare upgrade leaves alone by @​jdx in #​14444
  • avoid false "stack limit reached" on musl builds by @​jdx in #​14450
📚 Documentation
  • recommend committing mise.lock so CI and Docker skip version lookups by @​jdx in #​14453
⚡ Performance
  • (backend) take release tags from the versions host instead of listing or guessing them by @​jdx in #​14442
  • (backend) read the registry tool's version list for an explicit backend arg by @​jdx in #​14459
  • (backend) stop re-downloading what packslip resolution already verified by @​jdx in #​14466
  • (github) reuse mirrored attestations and skip mise-versions for asset-less latest releases by @​jdx in #​14443
  • (github) list releases and tags from mise-versions' whole lists by @​jdx in #​14477
  • (install) skip refetching version lists a cached copy already answers by @​jdx in #​14457
  • (install) reuse cached version lists for the tool's release-age window by @​jdx in #​14484
  • (install) keep the versions index and pipx's latest release for the release-age window by @​jdx in #​14485
  • (outdated) resolve latest without refetching the version list by @​jdx in #​14456
  • (outdated) resolve many registry tools with one request to the mise-versions index by @​jdx in #​14473
  • (python) list python versions from mise-versions instead of cloning pyenv by @​jdx in #​14455
  • (versions-host) send install tracking and python lists to static assets by @​jdx in #​14441
📦️ Dependency Updates
📦 Registry
Ci
Security
New Contributors
📦 Aqua Registry Updates
New Packages (2)
Updated Packages (1)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

Copy link
Copy Markdown

TL;DR for garyj

  • Security fix: rustls bumped to 0.23.46; also, remote task files now require trust before rendering, closing a potential RCE-style vector if you run mise tasks from untrusted repos.
  • Behavioral shift worth noting: mise is moving most version/release lookups (GitHub releases, tags, python versions, attestations) off api.github.com onto mise-versions/mise.jdx.dev, with GitHub API fallback removed in several places. If you're behind a proxy or firewall that only allowlists api.github.com, check that mise-versions/the CDN host is reachable.
  • Docs now explicitly recommend committing mise.lock so CI and Docker builds skip version lookups entirely, worth adopting for your containerized deploys/CI.
  • New mise env --paths to list PATH entries mise manages, handy for debugging shell/env setup.
  • Several perf wins around caching version lists and skipping redundant downloads during install/outdated checks, should make mise up/mise outdated noticeably snappier in CI and locally.
  • Pipx backend fix: global upgrades now preserve uv's graph locking, relevant if you manage Python CLI tools via mise use -g pipx:....

Auto-summarized by claude-sonnet-5 from the release notes above. Add/remove the deps-summary label to control this.

@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from fc0f89a to f958706 Compare October 20, 2026 12:47
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.11 update: bump jdx/mise to 2026.10.12 Oct 20, 2026
@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from f958706 to cc57d8a Compare October 20, 2026 22:06
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.12 update: bump jdx/mise to 2026.10.13 Oct 20, 2026
@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from cc57d8a to c08ae43 Compare October 21, 2026 19:40
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.13 update: bump jdx/mise to 2026.10.14 Oct 21, 2026
@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from c08ae43 to b93ce56 Compare October 22, 2026 12:33
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.14 update: bump jdx/mise to 2026.10.15 Oct 22, 2026
@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch 2 times, most recently from 47df226 to c8ad199 Compare October 24, 2026 05:45
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.15 update: bump jdx/mise to 2026.10.17 Oct 24, 2026
@renovate
renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from c8ad199 to 66f2a8b Compare October 26, 2026 14:43
@renovate renovate Bot changed the title update: bump jdx/mise to 2026.10.17 update: bump jdx/mise to 2026.10.18 Oct 26, 2026
@garyj
garyj merged commit 9b26b97 into master Oct 27, 2026
3 checks passed
@garyj
garyj deleted the renovate/jdx-mise-2026.x branch October 27, 2026 03:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant