Conversation
|
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
📝 WalkthroughWalkthroughThis PR updates the mise release to 2026.6.0: bumps the root Cargo.toml version, adds a 2026.6.0 changelog entry (including Aqua registry notes), updates README version output, updates distribution manifests (Nix, RPM, Snapcraft), and refreshes completion scripts to reference new usage spec filenames. ChangesRelease 2026.6.0 version bump
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Greptile SummaryThis is a standard release PR bumping mise to version 2026.6.0, updating version strings across packaging files, and vendoring aqua-registry v4.520.1 with three new packages and one updated package.
Confidence Score: 4/5Safe to merge with one registry entry worth addressing before the next registry sync. All version bumps and packaging changes are mechanical and consistent. The one concern is the google-antigravity/antigravity-cli entry, which previously performed sha512 checksum verification via a remote manifest and now has no checksum block at all after being migrated to github_release type. Users installing through this entry will download binaries without integrity verification, reversing the security posture of the old entry. vendor/aqua-registry/registry.yml — specifically the new google-antigravity/antigravity-cli entry Important Files Changed
Reviews (9): Last reviewed commit: "chore: release 2026.6.0" | Re-trigger Greptile |
Hyperfine Performance
|
| Command | Mean [ms] | Min [ms] | Max [ms] | Relative |
|---|---|---|---|---|
mise-2026.5.18 x -- echo |
23.1 ± 1.9 | 18.5 | 29.0 | 1.00 |
mise x -- echo |
24.9 ± 4.3 | 19.7 | 98.4 | 1.08 ± 0.21 |
mise env
| Command | Mean [ms] | Min [ms] | Max [ms] | Relative |
|---|---|---|---|---|
mise-2026.5.18 env |
22.0 ± 1.9 | 18.3 | 31.8 | 1.00 |
mise env |
22.9 ± 1.9 | 19.6 | 34.6 | 1.04 ± 0.12 |
mise hook-env
| Command | Mean [ms] | Min [ms] | Max [ms] | Relative |
|---|---|---|---|---|
mise-2026.5.18 hook-env |
21.0 ± 1.4 | 19.0 | 26.3 | 1.00 |
mise hook-env |
23.7 ± 2.3 | 19.8 | 38.1 | 1.13 ± 0.13 |
hook-env measured 13% slower, but the relative uncertainty overlaps the 10% threshold. |
mise ls
| Command | Mean [ms] | Min [ms] | Max [ms] | Relative |
|---|---|---|---|---|
mise-2026.5.18 ls |
17.2 ± 1.5 | 15.2 | 23.6 | 1.00 |
mise ls |
17.9 ± 1.1 | 15.9 | 23.6 | 1.04 ± 0.11 |
xtasks/test/perf
| Command | mise-2026.5.18 | mise | Variance |
|---|---|---|---|
| install (cached) | 143ms | 147ms | -2% |
| ls (cached) | 67ms | 67ms | +0% |
| bin-paths (cached) | 72ms | 71ms | +1% |
| task-ls (cached) | 138ms | 140ms | -1% |
mise-en-dev
force-pushed
the
release
branch
4 times, most recently
from
6b7d51b to
09b4fc3
Compare
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
| type: github_release | ||
| asset: "{{.Asset}}.sha256" | ||
| algorithm: sha256 | ||
| - type: github_release | ||
| repo_owner: tidewave-ai | ||
| repo_name: tidewave_app | ||
| description: Tidewave is the coding agent for full-stack web app development | ||
| files: | ||
| - name: tidewave | ||
| version_constraint: "false" | ||
| version_overrides: | ||
| - version_constraint: "true" | ||
| asset: tidewave-cli-{{.Arch}}-{{.OS}} | ||
| format: raw | ||
| windows_arm_emulation: true | ||
| replacements: | ||
| amd64: x86_64 | ||
| arm64: aarch64 | ||
| darwin: apple-darwin | ||
| linux: unknown-linux-musl | ||
| windows: pc-windows-msvc | ||
| - type: github_release | ||
| repo_owner: tilt-dev |
There was a problem hiding this comment.
The tidewave-ai/tidewave_app package entry has no checksum field in its version override, unlike the cliwright/whoiam entry added in the same PR which includes a proper checksum block. Without checksum verification, downloaded binaries cannot be integrity-checked, meaning a corrupted or tampered release artifact would be accepted silently. Most other github_release entries in the registry include a checksum. If upstream does not publish checksums, this should be documented explicitly (e.g. checksum: false or a comment), so it is clear the omission is intentional.
mise-en-dev
force-pushed
the
release
branch
3 times, most recently
from
f88c103 to
a039a32
Compare
| supported_envs: | ||
| - linux | ||
| - darwin | ||
| - type: http | ||
| name: google.com/antigravity-cli | ||
| description: Google's agentic development platform CLI companion | ||
| link: https://antigravity.google/download | ||
| format: tar.gz | ||
| - type: github_release | ||
| repo_owner: google-antigravity | ||
| repo_name: antigravity-cli | ||
| aliases: | ||
| - name: google.com/antigravity-cli | ||
| description: Google Antigravity CLI companion | ||
| files: | ||
| - name: agy | ||
| src: antigravity | ||
| checksum: | ||
| type: http | ||
| url: https://antigravity-cli-auto-updater-974169037036.us-central1.run.app/manifests/{{.OS}}_{{.Arch}}.json | ||
| file_format: regexp | ||
| algorithm: sha512 | ||
| pattern: | ||
| checksum: '"sha512": "([0-9a-f]{128})"' | ||
| overrides: | ||
| - goos: linux | ||
| goarch: amd64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/linux-x64/cli_linux_x64.tar.gz | ||
| - goos: linux | ||
| goarch: arm64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/linux-arm/cli_linux_arm64.tar.gz | ||
| - goos: darwin | ||
| goarch: amd64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/darwin-x64/cli_mac_x64.tar.gz | ||
| - goos: darwin | ||
| goarch: arm64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/darwin-arm/cli_mac_arm64.tar.gz | ||
| - goos: windows | ||
| goarch: amd64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/windows-x64/cli_windows_x64.exe | ||
| format: raw | ||
| files: | ||
| - name: agy | ||
| - goos: windows | ||
| goarch: arm64 | ||
| url: https://storage.googleapis.com/antigravity-public/antigravity-cli/{{.Version}}/windows-arm/cli_windows_arm64.exe | ||
| format: raw | ||
| version_constraint: "false" | ||
| version_overrides: | ||
| - version_constraint: semver("< 1.0.4") | ||
| error_message: The version is old. Please upgrade to 1.0.4 or later. | ||
| - version_constraint: "true" | ||
| asset: agy_cli_{{.OS}}_{{.Arch}}.{{.Format}} | ||
| format: tar.gz | ||
| files: | ||
| - name: agy | ||
| src: antigravity | ||
| replacements: | ||
| amd64: x64 | ||
| darwin: mac | ||
| overrides: | ||
| - goos: windows | ||
| format: zip | ||
| - type: github_release | ||
| repo_owner: google | ||
| repo_name: addlicense |
There was a problem hiding this comment.
The previous http-based entry included explicit sha512 checksum verification via a remote manifest URL. The new github_release entry has no checksum block at all. Users installing google.com/antigravity-cli via the new entry will download binaries with no integrity check, whereas they previously had one. If the GitHub release does not publish a checksum file, this should be noted explicitly (e.g. checksum: false), and if a checksum file exists (e.g. a checksums.txt attached to the release), it should be wired up the same way the cliwright/whoiam entry in this same PR does.
2 participants
🚀 Features
🐛 Bug Fixes
📚 Documentation
New Contributors
📦 Aqua Registry Updates
New Packages (3)
cliwright/whoiamgoogle-antigravity/antigravity-clitidewave-ai/tidewave_appUpdated Packages (1)
endevco/aube