Skip to content

Update dependency mise to 2026.10.7 - #340

Merged
zglicz merged 1 commit into
masterfrom
renovate/mise
Oct 16, 2026
Merged

Update dependency mise to 2026.10.7#340
zglicz merged 1 commit into
masterfrom
renovate/mise

Conversation

@renovate

@renovate renovate Bot commented Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending
mise patch 2026.10.3 → 2026.10.7 2026.10.11 (+3)

Release Notes

jdx/mise (mise)

v2026.10.7

Compare Source

🚀 Features
  • (npm) warn when a package installs no executables by @​jdx in #​14246
  • (tool) update auto_update tools in the background at a shell prompt by @​jdx in #​14239
  • (upgrade) add tool_update.global_auto to update every global tool by @​jdx in #​14237
  • (upgrade) add --global so self-updating tools can update through mise by @​jdx in #​14243
  • reuse downloads the server confirms are unchanged by @​jdx in #​14222
  • trust a restored download cache with --locked and make its size configurable by @​jdx in #​14242
🐛 Bug Fixes
🚜 Refactor
  • (lock) skip aqua prefix ambiguity pass without override prefixes by @​jdx in #​14232
📚 Documentation
  • explain auto_update's release delay and prefer mise settings KEY=VALUE by @​jdx in #​14235
New Contributors

v2026.10.6

Compare Source

🚀 Features
  • (bootstrap) offer to install git and ssh before cloning a repository by @​jdx in #​14188
  • (config) allow local paths in include by @​jdx in #​14178
  • (dotfiles) add mise dot save --re-encrypt by @​jdx in #​14210
  • (dotfiles) show unsaved changes in mise dot status by @​jdx in #​14209
  • (task) include working-tree changes in --affected and drop the experimental gate by @​jdx in #​14214
  • (vars) ask once and remember [vars] answers per machine with mise vars prompt by @​jdx in #​14190
🐛 Bug Fixes
  • (config) do not panic for a config file at the filesystem root by @​jdx in #​14182
  • (dotfiles) don't say nothing is configured when history tracks entries by @​jdx in #​14206
  • (dotfiles) stop re-warning about approved plaintext files by @​jdx in #​14204
  • (dotfiles) ask the plaintext question only of a terminal by @​jdx in #​14205
  • (dotfiles) name the checkpoints rollback and undo restore and record by @​jdx in #​14207
  • (dotfiles) don't credit rollback to a checkpoint past a truncated change list by @​jdx in #​14211
  • (dotfiles) list every encrypted file a sync cannot unlock by @​jdx in #​14208
  • (dotnet) validate the SDK being installed, not the active one by @​jdx in #​14189
  • (exec) skip lazy tools that are not installed when resolving after an install by @​jdx in #​14197
  • (go) install tools whose published go.mod is not tidy by @​JamBalaya56562 in #​14180
  • (npm) raise the soft open-file limit at startup by @​jdx in #​14174
  • (npm) build the open-file limit raise on 32-bit targets by @​jdx in #​14216
  • (oci) write a tool with several versions once in the embedded config by @​JamBalaya56562 in #​14200
  • (release) fix Full Changelog base tag and cross-link changelog and release notes by @​jdx in #​14199
  • (shim) skip directories when resolving a tool's bin name by @​jdx in #​14193
  • (shim) skip other missing lazy tools when a lazy tool installs on first use by @​jdx in #​14201
  • (upgrade) skip remote lookups for missing lazy tools during auto_update by @​jdx in #​14195
🚜 Refactor
🧪 Testing
📦️ Dependency Updates
Chore
Ci
New Contributors
📦 Aqua Registry Updates
Updated Packages (1)

v2026.10.5

Compare Source

🚀 Features
  • (bootstrap) add an os filter to files and directories by @​jdx in #​14058
  • (bootstrap) add auto mode for fish shell activation by @​jdx in #​14172
  • (config) merge [bootstrap] from config includes by @​jdx in #​14176
  • (doctor) show dotfiles repo path and origin by @​jdx in #​14173
  • (dotfiles) give each machine its own tracked version with a machine variant by @​jdx in #​14062
  • (dotfiles) infer merge sources and keep app state when switching from symlink by @​jdx in #​14076
  • (dotfiles) add merge = "missing" to fill in defaults the app may change by @​jdx in #​14081
  • (dotfiles) add track-local for history that never leaves the machine by @​jdx in #​14082
  • (dotfiles) refuse to publish saved versions that look like secrets by @​jdx in #​14171
  • (installs) move installs that cannot be reinstalled into the identity layout during migrate by @​jdx in #​14079
  • (java) breaking default java versions to Temurin builds by @​jdx in #​14146
  • (mcp) implement install_tool and require a trusted project for run_task by @​jdx in #​14111
  • (packslip) add a workflow option to pin the signing workflow by @​jdx in #​14075
  • (packslip) accept a list of signing workflows by @​jdx in #​14093
🐛 Bug Fixes
  • (backend) respect disable_backends in ls-remote by @​jdx in #​14130
  • (bootstrap) keep applying other package managers after one fails by @​jdx in #​14138
  • (bootstrap) skip the firewall section where it is unsupported by @​jdx in #​14137
  • (bootstrap) keep shell activation when a dotfile is tracked by @​jdx in #​14135
  • (bootstrap) warn on legacy command spellings and mise direnv by @​jdx in #​14113
  • (bootstrap) show hooks that use exec() in dry runs by @​jdx in #​14136
  • (bootstrap) support absent and unapply for systemd units by @​jdx in #​14139
  • (brew) infer formula version from the GitHub release tag path by @​JamBalaya56562 in #​14165
  • (brew) detach a DMG left attached by an interrupted install by @​jdx in #​14177
  • (cargo) do not resolve dependencies to mise shims by @​jdx in #​14070
  • (cli) accept yes/no booleans, prefix: in latest, and warn log level by @​jdx in #​14125
  • (cli) print the invoked command name in help by @​jdx in #​14123
  • (cli) replace unimplemented!() in --monorepo flags with an error by @​jdx in #​14116
  • (config) report an invalid tool version in config ls instead of panicking by @​JamBalaya56562 in #​14094
  • (config) verify .monorepo markers in paranoid mode by @​jdx in #​14105
  • (config) apply config environment files in directory order by @​jdx in #​14148
  • (config) ignore project bootstrap and dotfiles config in safe mode by @​jdx in #​14110
  • (daemons) quote deferred daemon commands for cmd.exe on Windows by @​JamBalaya56562 in #​14055
  • (daemons) run argv and Windows readiness probes in the tool environment by @​JamBalaya56562 in #​14080
  • (doctor) recognize a mise entry in the dedicated shims dir by @​jdx in #​14069
  • (dotfiles) say when incoming history changes no files on this machine by @​jdx in #​14066
  • (dotfiles) let MISE_YES confirm rollback, undo, and recover by @​jdx in #​14067
  • (dotfiles) save files replaced when adopting a setup, and add --take-remote-all by @​jdx in #​14065
  • (dotfiles) don't require --yes without a TTY for recoverable confirmations by @​jdx in #​14071
  • (dotfiles) stop prompting for recoverable operations by @​jdx in #​14077
  • (edit) do not overwrite an existing config without a terminal by @​jdx in #​14124
  • (env) honor redact = false exclusions in mise env --redacted by @​jdx in #​14109
  • (env) skip watch_files runs in safe mode and with --no-hooks by @​jdx in #​14108
  • (exec) install exact versions when the version list times out by @​jdx in #​14164
  • (generate) update the GitHub Actions and devcontainer templates by @​jdx in #​14145
  • (generate) skip hidden and global tasks in task-stubs by @​jdx in #​14127
  • (github) check asset size without a checksum by @​jdx in #​14128
  • (github) percent-encode the tag in gitlab release lookups by @​thespags in #​14102
  • (java) key the version cache by vendor and keep release_type by @​jdx in #​14131
  • (migrate) keep an unwritable stderr from aborting mise during a migration by @​JamBalaya56562 in #​14158
  • (node) verify GPG signatures for every node version by @​jdx in #​14132
  • (npm) stop npm view from re-entering mise through a foreign shim by @​jdx in #​14084
  • (packslip) let a user signer option replace a registry workflow default by @​jdx in #​14091
  • (plugins) install git:: plugins from a subdirectory by @​jdx in #​14140
  • (plugins) install packslip entries in [plugins] as vfox plugins by @​jdx in #​14141
  • (plugins) stop mise plugins uninstall --purge from panicking by @​jdx in #​14117
  • (plugins) install and compare git:: subdirectory sources from [plugins] by @​onokonem in #​14150
  • (prune) skip a tracked config whose tool version no longer parses by @​JamBalaya56562 in #​14103
  • (ruby) expand {os} and {arch} in precompiled URLs correctly by @​jdx in #​14133
  • (sandbox) clear inherited variables for --deny-env on Windows by @​jdx in #​14107
  • (sandbox) reject allow_net on macOS instead of writing invalid rules by @​jdx in #​14106
  • (settings) reject settings set in places mise ignores them by @​jdx in #​14126
  • (shim) skip version lookups for lazy tools that are not installed by @​jdx in #​14063
  • (shim) stop system fallback cycles through wrappers by @​jdx in #​14088
  • (shim) match Windows lazy shim names regardless of ASCII case by @​jdx in #​14090
  • (spm) use a custom api_url for cloning and skip lockfile URLs by @​jdx in #​14129
  • (task) report unmatched sources, show depends_post, and load global tasks by @​jdx in #​14122
  • (task) resolve mise run ./script relative to the current directory by @​jdx in #​14120
  • (task) send mbx-cache headers to the remote task cache by @​jdx in #​14147
  • (task) strip script extensions only from file task names by @​jdx in #​14159
  • (task) skip fresh raw and interactive cached tasks when their cache key is unchanged by @​jdx in #​14121
  • (task) keep secret values out of remote cache keys by @​jdx in #​14104
  • (use) create config.toml instead of writing global tools to config..toml by @​jdx in #​14179
  • (vfox) do not fail every command for an env plugin with no source by @​jdx in #​14119
  • (vfox) resolve embedded plugin files from the manifest dir by @​jdx in #​14167
  • (watch) pass watchexec flags through to watchexec by @​jdx in #​14115
  • keep temporary files out of the cache directory by @​jdx in #​14134
  • point error hints at current commands by @​jdx in #​14142
  • replace panics on bad input with errors by @​jdx in #​14118
  • require experimental for remote task sources, OpenTelemetry and spinel by @​jdx in #​14114
📚 Documentation
🧪 Testing
  • (backend) give test_ubi a longer version-fetch timeout by @​jdx in #​14162
  • (config) don't rely on teleport plugins being absent in not-found test by @​jdx in #​14059
  • (windows) isolate install fixtures and wait for executable teardown by @​jdx in #​14089
📦️ Dependency Updates
📦 Registry
  • pin packslip tools to the workflow that signs their releases by @​jdx in #​14092
  • rename mprocs to dekit and keep mprocs as an alias by @​jdx in #​14169
Chore
  • (docs) keep moved pages reachable and fail on dead anchors by @​jdx in #​14096
  • (settings) deprecate settings that have no effect by @​jdx in #​14112
  • run e2e tests from mise run test and fix the registry test example by @​jdx in #​14143
Ci
Security
New Contributors
📦 Aqua Registry Updates
Updated Packages (2)

v2026.10.4

Compare Source

🚀 Features
  • (bootstrap) add a tool-update service that keeps auto_update tools current by @​jdx in #​14040
  • (config) add global section write targets by @​jdx in #​14018
  • (config) move mise's auto-update settings under self_update.* by @​jdx in #​14038
  • (dotfiles) report notification availability and add notify command by @​jdx in #​14009
  • (dotfiles) add merge entries that own only some keys of a config file by @​jdx in #​14012
  • (http) add headers option for bearer and API-key auth by @​jdx in #​14022
  • (install) add an opt-in identity-based install layout by @​jdx in #​13951
  • (install) keep identity-layout installations in a shorter directory on Windows by @​jdx in #​13952
  • (installs) list installations and choose the one requests without a lockfile use by @​jdx in #​13953
  • (installs) move legacy installations into the identity layout by @​jdx in #​13955
  • (lock) preserve shared lockfile entries on request by @​jdx in #​13980
  • (npm) install packages from git repositories by @​jdx in #​14044
  • (prune) add prune.exclude to keep chosen tools from being pruned by @​jdx in #​14030
  • (secrets) add [secrets.fnox] project config and mise secrets ls by @​jdx in #​13967
  • (secrets) add --secrets and --secrets-all to mise run and mise x by @​jdx in #​13975
  • (task) give tasks only the fnox secrets they list by @​jdx in #​13974
  • (task) allow {{ secrets.X }} in task env values by @​jdx in #​13978
  • (upgrade) update global tools before they run with auto_update by @​jdx in #​14026
  • (util) add a comment-preserving YAML merge helper by @​jdx in #​14010
  • (util) add format-aware merge for JSON, TOML, and YAML files by @​jdx in #​14011
🐛 Bug Fixes
  • (backend) read a repository's packslip release list once per command by @​jdx in #​13991
  • (backend) only warn about a backend switch when the backend kind changes by @​jdx in #​14032
  • (bootstrap) don't create history state or fail on its lock unless writing files by @​jdx in #​14029
  • (cargo) serialize rustup state across cargo install fallbacks by @​jdx in #​14042
  • (config) keep global config when a project ignore resolves onto it via symlink by @​jdx in #​14006
  • (doctor) only warn about backend mismatches the registry serves by @​jdx in #​14005
  • (dotenv) leave a value ending in escaped whitespace unquoted by @​jdx in #​13956
  • (dotfiles) explain missing sources in conflicting declaration errors by @​himkt in #​13973
  • (dotfiles) skip legacy link discovery for group entries by @​jdx in #​14023
  • (dotnet) disable lockfile url enforcement for dotnet tool backend by @​james-newell-forge in #​13971
  • (env) fully redact secrets when redaction values overlap by @​jdx in #​13962
  • (github) log partial attestation verification failures by @​jdx in #​14035
  • (github) warn when attestations are skipped because the Sigstore trust root is unreachable by @​jdx in #​14036
  • (http) fetch a cached GitHub release once when callers race by @​jdx in #​13990
  • (http) don't retry a 429 whose Retry-After outlasts the backoff by @​jdx in #​14027
  • (http) retry downloads when an HTTP/2 stream reset fails the body read by @​jdx in #​14049
  • (install) switch backends into a new installation, and resolve CLI-named versions without guessing by @​jdx in #​13957
  • (install) keep a version incomplete until its postinstall hook succeeds by @​jdx in #​14037
  • (install) keep incomplete-install markers out of the cache by @​jdx in #​14051
  • (mcp) reject run_task task names that start with a dash by @​jdx in #​13961
  • (oci) stream large blob uploads in one PATCH by @​jdx in #​14017
  • (outdated) don't bump vendor-only requests like java@​temurin by @​jdx in #​14031
  • (prune) keep versions that a running process was started from by @​jdx in #​14020
  • (prune) snapshot what templated tool versions render to in the identity layout by @​jdx in #​14025
  • (pypi) build uv tool venvs on mise's python by @​jdx in #​14024
  • (pypi) lock from /simple/ for JSON URLs by @​deiga in #​14007
  • (python) create the auto uv venv with mise's python during install by @​halms in #​13981
  • (release) skip the vfox-tiny test fixture when vendoring embedded plugins by @​jdx in #​14047
  • (ruby) keep Gemfile reload watches out of executable hooks by @​DahanItamar in #​13985
  • (task) list monorepo subproject tasks in the mise://tasks MCP resource by @​jdx in #​14053
  • (uninstall) report each version once in a dry run by @​jdx in #​13992
📚 Documentation
⚡ Performance
  • (secrets) read cached fnox secrets from the fnox daemon by @​jdx in #​13979
🧪 Testing
📦️ Dependency Updates
📦 Registry
Chore
Ci
Security
  • (env) keep secrets inherited from a parent mise out of templates, caches and other tasks by @​jdx in #​13966
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (3)

Configuration

📅 Schedule: (in timezone CET)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 13, 2026 08:46
@hashicorp-vault-sonar-prod

hashicorp-vault-sonar-prod Bot commented Oct 13, 2026 •
edited by atlassian Bot
Loading

Copy link
Copy Markdown

Renovate Jira issue ID: PLUGINAPI-243

@renovate renovate Bot changed the title Update dependency mise to 2026.10.4 Update dependency mise to 2026.10.5 Oct 14, 2026
@renovate renovate Bot changed the title Update dependency mise to 2026.10.5 Update dependency mise to 2026.10.6 Oct 14, 2026
@renovate renovate Bot changed the title Update dependency mise to 2026.10.6 Update dependency mise to 2026.10.7 Oct 15, 2026
@sonarqube-next

sonarqube-next Bot commented Oct 15, 2026

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

@zglicz
zglicz merged commit 1591314 into master Oct 16, 2026
9 checks passed
@zglicz
zglicz deleted the renovate/mise branch October 16, 2026 07:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zglicz zglicz zglicz approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zglicz