From 6244d40b4f65744e8c89e6ba673d6f60607adf6e Mon Sep 17 00:00:00 2001 From: Hasnae Date: Mon, 28 Sep 2026 16:43:28 -0500 Subject: [PATCH] Allow mise-java.jdx.dev in the mise kit's network policy The java core plugin resolves JVM release metadata from mise-java.jdx.dev, a separate host from mise.jdx.dev which was already allowlisted. Without it, `mise install` fails to resolve any pinned java version with a 403 from the sandbox's default-deny network policy. Co-Authored-By: Claude Sonnet 5 --- kits/mise/mise.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/kits/mise/mise.yaml b/kits/mise/mise.yaml index 3c5934e..78fb7a1 100644 --- a/kits/mise/mise.yaml +++ b/kits/mise/mise.yaml @@ -44,6 +44,9 @@ capabilities: - raw.githubusercontent.com:443 # mise's registry/shorthand index and version metadata service. - mise.jdx.dev:443 + # mise's core java plugin resolves JVM release metadata from a + # separate host from mise.jdx.dev above. + - mise-java.jdx.dev:443 # Deliberately not exhaustive: mise is a router to whichever # upstream registry a given tool's backend names (npm, PyPI, # crates.io, RubyGems, the Go proxy, arbitrary plugin git hosts,