Skip to content

Update dependency mise to 2026.10.10 - #319

Merged
zglicz merged 1 commit into
masterfrom
renovate/mise
Oct 20, 2026
Merged

Update dependency mise to 2026.10.10#319
zglicz merged 1 commit into
masterfrom
renovate/mise

Conversation

@renovate

@renovate renovate Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change Pending
mise minor 2025.7.12 → 2026.10.10 2026.10.15 (+4)

Release Notes

jdx/mise (mise)

v2026.10.10

Compare Source

🚀 Features
  • (bootstrap) add snap package manager by @​jdx in #​14402
  • (bootstrap) adopt a branch with --adopt ?ref= by @​jdx in #​14400
  • (bootstrap) enable COPR repositories with [bootstrap.dnf.repos] by @​jdx in #​14401
  • (github) keep the OAuth refresh token behind Touch ID in the Secure Enclave by @​jdx in #​14413
  • (install) turn on the identity layout on Windows with experimental by @​jdx in #​14392
  • (task) add skip_if to skip a task based on current state by @​jdx in #​14399
🐛 Bug Fixes
  • (dotfiles) stop machines swapping ciphertext for an unchanged encrypted file by @​jdx in #​14405
  • (dotfiles) plan a stale pull again instead of pausing sharing by @​jdx in #​14414
  • (dotfiles) recover an interrupted operation before a pull plans by @​jdx in #​14410
  • (dotfiles) stop holding files that already have the incoming version by @​jdx in #​14411
  • (erlang) show a compiling phase while kerl builds from source by @​jdx in #​14391
  • (exec) run the original of a .mise-bins copy on Windows by @​jdx in #​14397
  • (install) retain saved packslip shared-workflow pins by @​jdx in #​14408
  • (npm) reinstall aube trees that lost their dependency links on Windows by @​jdx in #​14418
  • (npm) preserve graph locking during global upgrades by @​jdx in #​14419
  • (prune) show progress while scanning for unused versions by @​jdx in #​14420
  • (rust) read the nightly manifest from RUSTUP_DIST_SERVER by @​jdx in #​14384
  • (schema) reject unknown keys in env._.python and its venv options by @​JamBalaya56562 in #​14387
  • (use) honor --tool-option minimum_release_age=0s when resolving latest by @​halms in #​14398
📚 Documentation
  • (bootstrap) list [bootstrap.apt.sources] in the overview and run order by @​jdx in #​14396
  • (config) explain the config search before the per-directory file names by @​jdx in #​14390
⚡ Performance
  • (dotfiles) stop pull from walking history one git process per commit by @​jdx in #​14407
  • (dotfiles) read history objects and refs through gix by @​jdx in #​14415
📦️ Dependency Updates

v2026.10.9

Compare Source

🚀 Features
  • (bootstrap) add apt repositories and PPAs with [bootstrap.apt.sources] by @​jdx in #​14306
  • (bootstrap) embed apt source signing keys inline in .sources files by @​jdx in #​14348
  • (bootstrap) render templates in [bootstrap.repos] checkout paths by @​jdx in #​14359
  • (bootstrap) declare macOS login items by @​jdx in #​14354
  • (bootstrap) layer dnf packages with rpm-ostree on Fedora Atomic hosts by @​jdx in #​14357
  • (bootstrap) support run0 and doas for privilege elevation by @​jdx in #​14351
  • (dotfiles) show tracked entries that no variant selects in status by @​jdx in #​14266
  • (dotfiles) group mise dot status into sections by @​jdx in #​14361
  • (github) add oauth_copy_code to copy the device code to the clipboard by @​jdx in #​14269
  • (github) keep the native OAuth refresh token in a password manager or keychain by @​jdx in #​14360
  • (http) add libc() and avx2() template functions by @​jdx in #​14298
  • (pypi) read upload times from PEP 691 simple indexes by @​jdx in #​14352
  • (rust) download rustup-init from RUSTUP_UPDATE_ROOT by @​jdx in #​14356
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
  • (bootstrap) explain when to use --from versus --adopt by @​jdx in #​14301
  • (bootstrap) recommend fish = "auto" for fish shell activation by @​jdx in #​14304
  • (dotfiles) explain when to use sync, pull, and apply by @​jdx in #​14343
  • (shims) explain how to check whether a tool is installed by @​jdx in #​14337
  • switch body text to DM Sans and tighten the releases page by @​jdx in #​14302
  • self-host DM Sans and JetBrains Mono so they load on mise.jdx.dev by @​jdx in #​14310
🧪 Testing
  • (bootstrap) don't depend on bc being absent in the apt sources test by @​jdx in #​14371
📦️ Dependency Updates
📦 Registry
Chore
  • (ci) switch to jactionlint v2 and drop zizmor by @​jdx in #​14256
  • fix CI for the aqua registry update and the unsafe-libyaml advisory by @​jdx in #​14326
Ci
Security
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (3)

v2026.10.8

Compare Source

🚀 Features
  • (runtime-symlinks) add a global link to the version global config selects by @​jdx in #​14271
🐛 Bug Fixes
📚 Documentation
  • (dotfiles) add a recommended setup and a readable modes-and-keys table by @​jdx in #​14267
🧪 Testing
  • (http) stop the allow_html test waiting out the https retry by @​jdx in #​14285
📦 Registry
📦 Aqua Registry Updates
New Packages (2)

v2026.10.7

Compare Source

🚀 Features
  • (npm) warn when a package installs no executables by @​jdx in #​14246
  • (tool) update auto_update tools in the background at a shell prompt by @​jdx in #​14239
  • (upgrade) add tool_update.global_auto to update every global tool by @​jdx in #​14237
  • (upgrade) add --global so self-updating tools can update through mise by @​jdx in #​14243
  • reuse downloads the server confirms are unchanged by @​jdx in #​14222
  • trust a restored download cache with --locked and make its size configurable by @​jdx in #​14242
🐛 Bug Fixes
🚜 Refactor
  • (lock) skip aqua prefix ambiguity pass without override prefixes by @​jdx in #​14232
📚 Documentation
  • explain auto_update's release delay and prefer mise settings KEY=VALUE by @​jdx in #​14235
New Contributors

v2026.10.6

Compare Source

🚀 Features
  • (bootstrap) offer to install git and ssh before cloning a repository by @​jdx in #​14188
  • (config) allow local paths in include by @​jdx in #​14178
  • (dotfiles) add mise dot save --re-encrypt by @​jdx in #​14210
  • (dotfiles) show unsaved changes in mise dot status by @​jdx in #​14209
  • (task) include working-tree changes in --affected and drop the experimental gate by @​jdx in #​14214
  • (vars) ask once and remember [vars] answers per machine with mise vars prompt by @​jdx in #​14190
🐛 Bug Fixes
  • (config) do not panic for a config file at the filesystem root by @​jdx in #​14182
  • (dotfiles) don't say nothing is configured when history tracks entries by @​jdx in #​14206
  • (dotfiles) stop re-warning about approved plaintext files by @​jdx in #​14204
  • (dotfiles) ask the plaintext question only of a terminal by @​jdx in #​14205
  • (dotfiles) name the checkpoints rollback and undo restore and record by @​jdx in #​14207
  • (dotfiles) don't credit rollback to a checkpoint past a truncated change list by @​jdx in #​14211
  • (dotfiles) list every encrypted file a sync cannot unlock by @​jdx in #​14208
  • (dotnet) validate the SDK being installed, not the active one by @​jdx in #​14189
  • (exec) skip lazy tools that are not installed when resolving after an install by @​jdx in #​14197
  • (go) install tools whose published go.mod is not tidy by @​JamBalaya56562 in #​14180
  • (npm) raise the soft open-file limit at startup by @​jdx in #​14174
  • (npm) build the open-file limit raise on 32-bit targets by @​jdx in #​14216
  • (oci) write a tool with several versions once in the embedded config by @​JamBalaya56562 in #​14200
  • (release) fix Full Changelog base tag and cross-link changelog and release notes by @​jdx in #​14199
  • (shim) skip directories when resolving a tool's bin name by @​jdx in #​14193
  • (shim) skip other missing lazy tools when a lazy tool installs on first use by @​jdx in #​14201
  • (upgrade) skip remote lookups for missing lazy tools during auto_update by @​jdx in #​14195
🚜 Refactor
🧪 Testing
📦️ Dependency Updates
Chore
Ci
New Contributors
📦 Aqua Registry Updates
Updated Packages (1)

v2026.10.5

Compare Source

🚀 Features
  • (bootstrap) add an os filter to files and directories by @​jdx in #​14058
  • (bootstrap) add auto mode for fish shell activation by @​jdx in #​14172
  • (config) merge [bootstrap] from config includes by @​jdx in #​14176
  • (doctor) show dotfiles repo path and origin by @​jdx in #​14173
  • (dotfiles) give each machine its own tracked version with a machine variant by @​jdx in #​14062
  • (dotfiles) infer merge sources and keep app state when switching from symlink by @​jdx in #​14076
  • (dotfiles) add merge = "missing" to fill in defaults the app may change by @​jdx in #​14081
  • (dotfiles) add track-local for history that never leaves the machine by @​jdx in #​14082
  • (dotfiles) refuse to publish saved versions that look like secrets by @​jdx in #​14171
  • (installs) move installs that cannot be reinstalled into the identity layout during migrate by @​jdx in #​14079
  • (java) breaking default java versions to Temurin builds by @​jdx in #​14146
  • (mcp) implement install_tool and require a trusted project for run_task by @​jdx in #​14111
  • (packslip) add a workflow option to pin the signing workflow by @​jdx in #​14075
  • (packslip) accept a list of signing workflows by @​jdx in #​14093
🐛 Bug Fixes
  • (backend) respect disable_backends in ls-remote by @​jdx in #​14130
  • (bootstrap) keep applying other package managers after one fails by @​jdx in #​14138
  • (bootstrap) skip the firewall section where it is unsupported by @​jdx in #​14137
  • (bootstrap) keep shell activation when a dotfile is tracked by @​jdx in #​14135
  • (bootstrap) warn on legacy command spellings and mise direnv by @​jdx in #​14113
  • (bootstrap) show hooks that use exec() in dry runs by @​jdx in #​14136
  • (bootstrap) support absent and unapply for systemd units by @​jdx in #​14139
  • (brew) infer formula version from the GitHub release tag path by @​JamBalaya56562 in #​14165
  • (brew) detach a DMG left attached by an interrupted install by @​jdx in #​14177
  • (cargo) do not resolve dependencies to mise shims by @​jdx in #​14070
  • (cli) accept yes/no booleans, prefix: in latest, and warn log level by @​jdx in #​14125
  • (cli) print the invoked command name in help by @​jdx in #​14123
  • (cli) replace unimplemented!() in --monorepo flags with an error by @​jdx in #​14116
  • (config) report an invalid tool version in config ls instead of panicking by @​JamBalaya56562 in #​14094
  • (config) verify .monorepo markers in paranoid mode by @​jdx in #​14105
  • (config) apply config environment files in directory order by @​jdx in #​14148
  • (config) ignore project bootstrap and dotfiles config in safe mode by @​jdx in #​14110
  • (daemons) quote deferred daemon commands for cmd.exe on Windows by @​JamBalaya56562 in #​14055
  • (daemons) run argv and Windows readiness probes in the tool environment by @​JamBalaya56562 in #​14080
  • (doctor) recognize a mise entry in the dedicated shims dir by @​jdx in #​14069
  • (dotfiles) say when incoming history changes no files on this machine by @​jdx in #​14066
  • (dotfiles) let MISE_YES confirm rollback, undo, and recover by @​jdx in #​14067
  • (dotfiles) save files replaced when adopting a setup, and add --take-remote-all by @​jdx in #​14065
  • (dotfiles) don't require --yes without a TTY for recoverable confirmations by @​jdx in #​14071
  • (dotfiles) stop prompting for recoverable operations by @​jdx in #​14077
  • (edit) do not overwrite an existing config without a terminal by @​jdx in #​14124
  • (env) honor redact = false exclusions in mise env --redacted by @​jdx in #​14109
  • (env) skip watch_files runs in safe mode and with --no-hooks by @​jdx in #​14108
  • (exec) install exact versions when the version list times out by @​jdx in #​14164
  • (generate) update the GitHub Actions and devcontainer templates by @​jdx in #​14145
  • (generate) skip hidden and global tasks in task-stubs by @​jdx in #​14127
  • (github) check asset size without a checksum by @​jdx in #​14128
  • (github) percent-encode the tag in gitlab release lookups by @​thespags in #​14102
  • (java) key the version cache by vendor and keep release_type by @​jdx in #​14131
  • (migrate) keep an unwritable stderr from aborting mise during a migration by @​JamBalaya56562 in #​14158
  • (node) verify GPG signatures for every node version by @​jdx in #​14132
  • (npm) stop npm view from re-entering mise through a foreign shim by @​jdx in #​14084
  • (packslip) let a user signer option replace a registry workflow default by @​jdx in #​14091
  • (plugins) install git:: plugins from a subdirectory by @​jdx in #​14140
  • (plugins) install packslip entries in [plugins] as vfox plugins by @​jdx in #​14141
  • (plugins) stop mise plugins uninstall --purge from panicking by @​jdx in #​14117
  • (plugins) install and compare git:: subdirectory sources from [plugins] by @​onokonem in #​14150
  • (prune) skip a tracked config whose tool version no longer parses by @​JamBalaya56562 in #​14103
  • (ruby) expand {os} and {arch} in precompiled URLs correctly by @​jdx in #​14133
  • (sandbox) clear inherited variables for --deny-env on Windows by @​jdx in #​14107
  • (sandbox) reject allow_net on macOS instead of writing invalid rules by @​jdx in #​14106
  • (settings) reject settings set in places mise ignores them by @​jdx in #​14126
  • (shim) skip version lookups for lazy tools that are not installed by @​jdx in #​14063
  • (shim) stop system fallback cycles through wrappers by @​jdx in #​14088
  • (shim) match Windows lazy shim names regardless of ASCII case by @​jdx in #​14090
  • (spm) use a custom api_url for cloning and skip lockfile URLs by @​jdx in #​14129
  • (task) report unmatched sources, show depends_post, and load global tasks by @​jdx in #​14122
  • (task) resolve mise run ./script relative to the current directory by @​jdx in #​14120
  • (task) send mbx-cache headers to the remote task cache by @​jdx in #​14147
  • (task) strip script extensions only from file task names by @​jdx in #​14159
  • (task) skip fresh raw and interactive cached tasks when their cache key is unchanged by @​jdx in #​14121
  • (task) keep secret values out of remote cache keys by @​jdx in #​14104
  • (use) create config.toml instead of writing global tools to config..toml by @​jdx in #​14179
  • (vfox) do not fail every command for an env plugin with no source by @​jdx in #​14119
  • (vfox) resolve embedded plugin files from the manifest dir by @​jdx in #​14167
  • (watch) pass watchexec flags through to watchexec by @​jdx in #​14115
  • keep temporary files out of the cache directory by @​jdx in #​14134
  • point error hints at current commands by @​jdx in #​14142
  • replace panics on bad input with errors by @​jdx in #​14118
  • require experimental for remote task sources, OpenTelemetry and spinel by @​jdx in #​14114
📚 Documentation
🧪 Testing
  • (backend) give test_ubi a longer version-fetch timeout by @​jdx in #​14162
  • (config) don't rely on teleport plugins being absent in not-found test by @​jdx in #​14059
  • (windows) isolate install fixtures and wait for executable teardown by @​jdx in #​14089
📦️ Dependency Updates
📦 Registry
  • pin packslip tools to the workflow that signs their releases by @​jdx in #​14092
  • rename mprocs to dekit and keep mprocs as an alias by @​jdx in #​14169
Chore
  • (docs) keep moved pages reachable and fail on dead anchors by @​jdx in #​14096
  • (settings) deprecate settings that have no effect by @​jdx in #​14112
  • run e2e tests from mise run test and fix the registry test example by @​jdx in #​14143
Ci
Security
New Contributors
📦 Aqua Registry Updates
Updated Packages (2)

v2026.10.4

Compare Source

🚀 Features
  • (bootstrap) add a tool-update service that keeps auto_update tools current by @​jdx in #​14040
  • (config) add global section write targets by @​jdx in #​14018
  • (config) move mise's auto-update settings under self_update.* by @​jdx in #​14038
  • (dotfiles) report notification availability and add notify command by @​jdx in #​14009
  • (dotfiles) add merge entries that own only some keys of a config file by @​jdx in #​14012
  • (http) add headers option for bearer and API-key auth by @​jdx in #​14022
  • (install) add an opt-in identity-based install layout by @​jdx in #​13951
  • (install) keep identity-layout installations in a shorter directory on Windows by @​jdx in #​13952
  • (installs) list installations and choose the one requests without a lockfile use by @​jdx in #​13953
  • (installs) move legacy installations into the identity layout by @​jdx in #​13955
  • (lock) preserve shared lockfile entries on request by @​jdx in #​13980
  • (npm) install packages from git repositories by @​jdx in #​14044
  • (prune) add prune.exclude to keep chosen tools from being pruned by @​jdx in #​14030
  • (secrets) add [secrets.fnox] project config and mise secrets ls by @​jdx in #​13967
  • (secrets) add --secrets and --secrets-all to mise run and mise x by @​jdx in #​13975
  • (task) give tasks only the fnox secrets they list by @​jdx in #​13974
  • (task) allow {{ secrets.X }} in task env values by @​jdx in #​13978
  • (upgrade) update global tools before they run with auto_update by @​jdx in #​14026
  • (util) add a comment-preserving YAML merge helper by @​jdx in #​14010
  • (util) add format-aware merge for JSON, TOML, and YAML files by @​jdx in #​14011
🐛 Bug Fixes
  • (backend) read a repository's packslip release list once per command by @​jdx in #​13991
  • (backend) only warn about a backend switch when the backend kind changes by @​jdx in #​14032
  • (bootstrap) don't create history state or fail on its lock unless writing files by @​jdx in #​14029
  • (cargo) serialize rustup state across cargo install fallbacks by @​jdx in #​14042
  • (config) keep global config when a project ignore resolves onto it via symlink by @​jdx in #​14006
  • (doctor) only warn about backend mismatches the registry serves by @​jdx in #​14005
  • (dotenv) leave a value ending in escaped whitespace unquoted by @​jdx in #​13956
  • (dotfiles) explain missing sources in conflicting declaration errors by @​himkt in #​13973
  • (dotfiles) skip legacy link discovery for group entries by @​jdx in #​14023
  • (dotnet) disable lockfile url enforcement for dotnet tool backend by @​james-newell-forge in #​13971
  • (env) fully redact secrets when redaction values overlap by @​jdx in #​13962
  • (github) log partial attestation verification failures by @​jdx in #​14035
  • (github) warn when attestations are skipped because the Sigstore trust root is unreachable by @​jdx in #​14036
  • (http) fetch a cached GitHub release once when callers race by @​jdx in #​13990
  • (http) don't retry a 429

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone CET)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 20, 2026 09:51
@gitar-bot

gitar-bot Bot commented Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
CI failed: The CI failure was a Jira issue-creation step rejecting an oversized description: the Renovate PR's mise release notes pushed the payload past Jira's 32,767-character limit. This is tied to this mise update, not infrastructure or flakiness.

Overview

One unique error template was found across 1 analyzed log (job 118564565089, commit d459683). The failure is a single, clear configuration-level error in the Vault/Jira reporting step, and the analyzer marked it as related to this PR.

Failures

Jira issue creation rejected: description exceeds 32,767 characters (confidence: high)

  • Type: configuration
  • Affected jobs: 118564565089
  • Related to change: yes
  • Root cause: The PullRequestCreated action submitted a Jira issue description containing the full mise release notes from this Renovate update. Jira returned HTTP 400 because the description exceeded its 32,767-character limit, and the action failed with Failed to create a new issue in Jira. The skipped secret-diagnostic steps and the missing Evergreen Epic parent were not causal.
  • Suggested fix: Truncate or summarize the release notes included in the Jira description, or omit them and link to the upstream mise changelog instead.

Summary

  • Change-related failures: 1 — the oversized Jira description generated from the mise 2026.10.10 release notes.
  • Infrastructure/flaky failures: None identified.
  • Recommended action: Adjust the Jira reporting workflow so release-note content is truncated or linked rather than embedded in full, then rerun the job.
Code Review ✅ Approved

🟡 Medium risk · Upgrading mise in the build workflow could change tool installation or version resolution, disrupting CI builds across the listed jobs.

Renovate bot bumps the mise dependency from 2025.7.12 to 2026.10.10 (minor update). No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected
Cross-PR 1 PR inspected 0 open impacts

PR #321: Update GitHub Actions dependencies (major) Inspected

Auto-approval Not enabled

Set up

For more verification details, comment gitar display:verbose.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply Compact 
gitar auto-apply:on         

gitar display:verbose

Was this helpful? React with 👍 / 👎 | Gitar

@zglicz
zglicz enabled auto-merge (squash) October 20, 2026 09:53
@sonarqube-next

sonarqube-next Bot commented Oct 20, 2026

Copy link
Copy Markdown

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

@gitar-bot gitar-bot Bot mentioned this pull request Oct 20, 2026
Merged
1 task
@zglicz
zglicz merged commit 7416704 into master Oct 20, 2026
14 of 15 checks passed
@zglicz
zglicz deleted the renovate/mise branch October 20, 2026 10:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zglicz zglicz zglicz approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zglicz