Skip to content

chore: release 2026.6.10 #10440

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jdx merged 1 commit into from
Jun 14, 2026
Merged

chore: release 2026.6.10 #10440

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,41 @@
# Changelog

## [2026.6.10](https://github.com/jdx/mise/compare/v2026.6.9..v2026.6.10) - 2026-06-14

### 🚀 Features

- **(env)** add default fallback shorthand by @jdx in [#10441](https://github.com/jdx/mise/pull/10441)

### 🐛 Bug Fixes

- **(backend)** enable 7z archives on unix by @risu729 in [#10434](https://github.com/jdx/mise/pull/10434)
- **(env)** drop stale mise install dirs from mise x/run child PATH by @JamBalaya56562 in [#10422](https://github.com/jdx/mise/pull/10422)
- **(env)** expand shell defaults like POSIX by @jdx in [#10445](https://github.com/jdx/mise/pull/10445)
- **(file)** atomically replace symlinks to avoid spurious EEXIST warnings by @JamBalaya56562 in [#10414](https://github.com/jdx/mise/pull/10414)
- **(shims)** guard Windows bash shims against WSL PATH interop by @JamBalaya56562 in [#10421](https://github.com/jdx/mise/pull/10421)
- **(task)** prefer Windows script task siblings by @jdx in [#10443](https://github.com/jdx/mise/pull/10443)
- **(vfox)** apply tools=true env to os.execute install hooks by @JamBalaya56562 in [#10432](https://github.com/jdx/mise/pull/10432)

### 📦️ Dependency Updates

- replace size formatting deps by @risu729 in [#10438](https://github.com/jdx/mise/pull/10438)

### Chore

- **(ci)** enable coderabbit for draft prs by @risu729 in [#10436](https://github.com/jdx/mise/pull/10436)
- **(ci)** use shared coderabbit config by @jdx in [#10442](https://github.com/jdx/mise/pull/10442)

### 📦 Aqua Registry Updates

#### New Packages (1)

- [`CycloneDX/cdxgen`](https://github.com/CycloneDX/cdxgen)

#### Updated Packages (2)

- [`aquaproj/registry-tool`](https://github.com/aquaproj/registry-tool)
- [`haskell/ghcup-hs`](https://github.com/haskell/ghcup-hs)

## [2026.6.9](https://github.com/jdx/mise/compare/v2026.6.8..v2026.6.9) - 2026-06-14

### Chore
Expand Down
2 changes: 1 addition & 1 deletion Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ members = [

[package]
name = "mise"
version = "2026.6.9"
version = "2026.6.10"
edition = "2024"
description = "Dev tools, env vars, and tasks in one CLI"
authors = ["Jeff Dickey (@jdx)"]
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ $ ~/.local/bin/mise --version
/ / / / / / (__ ) __/_____/ __/ / / /_____/ /_/ / / /_/ / /__/ __/
/_/ /_/ /_/_/____/\___/ \___/_/ /_/ / .___/_/\__,_/\___/\___/
/_/ by @jdx
2026.6.9 macos-arm64 (2026-06-14)
2026.6.10 macos-arm64 (2026-06-14)
```

Hook mise into your shell (pick the right one for your shell):
Expand Down
2 changes: 1 addition & 1 deletion completions/_mise
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ _mise() {
return 1
fi

local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_6_9.spec"
local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_6_10.spec"
if [[ ! -f "$spec_file" ]]; then
mise usage >| "$spec_file"
fi
Expand Down
2 changes: 1 addition & 1 deletion completions/mise.bash
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ _mise() {

local cur prev words cword was_split comp_args
_comp_initialize -n : -- "$@" || return
local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_6_9.spec"
local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_6_10.spec"
if [[ ! -f "$spec_file" ]]; then
mise usage >| "$spec_file"
fi
Expand Down
2 changes: 1 addition & 1 deletion completions/mise.fish
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ if ! type -p usage &> /dev/null
return 1
end
set -l tmpdir (if set -q TMPDIR; echo $TMPDIR; else; echo /tmp; end)
set -l spec_file "$tmpdir/usage__usage_spec_mise_2026_6_9.spec"
set -l spec_file "$tmpdir/usage__usage_spec_mise_2026_6_10.spec"
if not test -f "$spec_file"
mise usage | string collect > "$spec_file"
end
Expand Down
2 changes: 1 addition & 1 deletion completions/mise.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ Register-ArgumentCompleter -Native -CommandName 'mise' -ScriptBlock {
param($wordToComplete, $commandAst, $cursorPosition)

$tmpDir = if ($env:TEMP) { $env:TEMP } else { [System.IO.Path]::GetTempPath() }
$specFile = Join-Path $tmpDir "usage__usage_spec_mise_2026_6_9.kdl"
$specFile = Join-Path $tmpDir "usage__usage_spec_mise_2026_6_10.kdl"

if (-not (Test-Path $specFile)) {
mise usage | Out-File -FilePath $specFile -Encoding utf8
Expand Down
2 changes: 1 addition & 1 deletion default.nix
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

rustPlatform.buildRustPackage {
pname = "mise";
version = "2026.6.9";
version = "2026.6.10";

src = lib.cleanSource ./.;

Expand Down
2 changes: 1 addition & 1 deletion packaging/rpm/mise.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
Summary: Dev tools, env vars, and tasks in one CLI
Name: mise
Version: 2026.6.9
Version: 2026.6.10
Release: 1
URL: https://github.com/jdx/mise/
Group: System
Expand Down
2 changes: 1 addition & 1 deletion snapcraft.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@

name: mise
title: mise-en-place
version: "2026.6.9"
version: "2026.6.10"
summary: Dev tools, env vars, and tasks in one CLI
description: |
mise-en-place prepares your development environment before each command runs.
Expand Down
2 changes: 1 addition & 1 deletion vendor/aqua-registry/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{
"repository": "aquaproj/aqua-registry",
"tag": "4e1e686b8558cf90e8c6fe326e15a75cda30d2b2"
"tag": "3671967a551902d4f8cd74085405ec214d173315"
}
69 changes: 64 additions & 5 deletions vendor/aqua-registry/registry.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2408,6 +2408,48 @@ packages:
- darwin
- windows
- amd64
- type: github_release
repo_owner: CycloneDX
repo_name: cdxgen
description: Creates CycloneDX Bill of Materials (BOM) from source code and container images
version_constraint: "false"
version_overrides:
- version_constraint: semver("< 11.5.0")
error_message: The version is too old. Please use a version 11.5.0 or higher.
- version_constraint: semver("<= 11.9.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
- version_constraint: semver("<= 12.0.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
supported_envs:
- linux
- darwin/arm64
- windows
- version_constraint: "true"
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
Comment on lines +2411 to +2448

@greptile-apps greptile-apps Bot Jun 14, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Missing GitHub star count for new package

The PR description adds CycloneDX/cdxgen as a new aqua registry package but does not include its GitHub star count. Per the team's review rule, new registry tool additions must include the GitHub star popularity count in the PR description so low-popularity tools can be screened before merging.

Rule Used: What: new registry tools must include the github s... (source)

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
Comment on lines +2419 to +2452

@coderabbitai coderabbitai Bot Jun 14, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

base="https://github.com/cdxgen/cdxgen/releases/download/v12.3.1"
for asset in cdxgen-windows-amd64 cdxgen-windows-amd64.exe; do
  code="$(curl -fsSIL -o /dev/null -w '%{http_code}' "$base/$asset" || true)"
  printf '%s -> %s\n' "$asset" "$code"
done

Repository: jdx/mise

Length of output: 179

🏁 Script executed:

# Verify the file exists and check line count
wc -l vendor/aqua-registry/registry.yml

# Check the specific lines mentioned in the review (2419-2452)
sed -n '2419,2452p' vendor/aqua-registry/registry.yml

Repository: jdx/mise

Length of output: 1109

🏁 Script executed:

# Also verify the src/backend/aqua.rs behavior mentioned
sed -n '714,749p' src/backend/aqua.rs

Repository: jdx/mise

Length of output: 1582

Add a Windows-specific asset override for cdxgen.

Lines 2420, 2430, and 2444 resolve the Windows asset as cdxgen-windows-amd64, but upstream documents the standalone Windows binary as cdxgen-windows-amd64.exe. Because src/backend/aqua.rs:714-749 uses this registry asset template directly when picking the per-platform download and checksum, Windows installs will miss both the binary and its {{.Asset}}.sha256 sidecar.

🔧 Suggested fix 
      - version_constraint: semver("<= 11.9.0")
        asset: cdxgen-{{.OS}}-{{.Arch}}
        format: raw
        overrides:
          - goos: linux
            asset: cdxgen-{{.OS}}-{{.Arch}}-musl
+         - goos: windows
+           asset: cdxgen-{{.OS}}-{{.Arch}}.exe
        checksum:
          type: github_release
          asset: "{{.Asset}}.sha256"
          algorithm: sha256
      - version_constraint: semver("<= 12.0.0")
        asset: cdxgen-{{.OS}}-{{.Arch}}
        format: raw
        overrides:
          - goos: linux
            asset: cdxgen-{{.OS}}-{{.Arch}}-musl
+         - goos: windows
+           asset: cdxgen-{{.OS}}-{{.Arch}}.exe
        checksum:
          type: github_release
          asset: "{{.Asset}}.sha256"
          algorithm: sha256
        supported_envs:
          - linux
          - darwin/arm64
          - windows
      - version_constraint: "true"
        asset: cdxgen-{{.OS}}-{{.Arch}}
        format: raw
        overrides:
          - goos: linux
            asset: cdxgen-{{.OS}}-{{.Arch}}-musl
+         - goos: windows
+           asset: cdxgen-{{.OS}}-{{.Arch}}.exe
        checksum:
          type: github_release
          asset: "{{.Asset}}.sha256"
          algorithm: sha256
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- version_constraint: semver("<= 11.9.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
- version_constraint: semver("<= 12.0.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
supported_envs:
- linux
- darwin/arm64
- windows
- version_constraint: "true"
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
- version_constraint: semver("<= 11.9.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
- goos: windows
asset: cdxgen-{{.OS}}-{{.Arch}}.exe
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
- version_constraint: semver("<= 12.0.0")
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
- goos: windows
asset: cdxgen-{{.OS}}-{{.Arch}}.exe
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
supported_envs:
- linux
- darwin/arm64
- windows
- version_constraint: "true"
asset: cdxgen-{{.OS}}-{{.Arch}}
format: raw
overrides:
- goos: linux
asset: cdxgen-{{.OS}}-{{.Arch}}-musl
- goos: windows
asset: cdxgen-{{.OS}}-{{.Arch}}.exe
checksum:
type: github_release
asset: "{{.Asset}}.sha256"
algorithm: sha256
🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@vendor/aqua-registry/registry.yml` around lines 2419 - 2452, The Windows
asset for cdxgen is currently resolved as cdxgen-windows-amd64, but the upstream
binary is named cdxgen-windows-amd64.exe. Add a Windows-specific asset override
in the overrides section of each version constraint block (for semver("<=
11.9.0"), semver("<= 12.0.0"), and "true") in the
vendor/aqua-registry/registry.yml file, similar to the existing Linux musl
overrides. Each override should specify goos: windows and transform the asset
name from cdxgen-{{.OS}}-{{.Arch}} to cdxgen-{{.OS}}-{{.Arch}}.exe so that the
correct binary name and its .sha256 checksum file are located during Windows
installations.

- type: github_release
repo_owner: CycloneDX
repo_name: cyclonedx-cli
Expand Down Expand Up @@ -14178,7 +14220,7 @@ packages:
slsa_provenance:
type: github_release
asset: multiple.intoto.jsonl
- version_constraint: "true"
- version_constraint: semver("<= 0.5.4")
asset: argd_{{.OS}}_{{.Arch}}.{{.Format}}
format: tar.gz
checksum:
Expand All @@ -14197,6 +14239,25 @@ packages:
slsa_provenance:
type: github_release
asset: multiple.intoto.jsonl
- version_constraint: "true"
asset: argd_{{.OS}}_{{.Arch}}.{{.Format}}
format: tar.gz
checksum:
type: github_release
asset: argd_checksums.txt
algorithm: sha256
cosign:
bundle:
type: github_release
asset: argd_checksums.txt.sigstore.json
opts:
- --certificate-identity-regexp
- "https://github\\.com/suzuki-shunsuke/go-release-workflow/\\.github/workflows/release\\.yaml@.*"
- --certificate-oidc-issuer
- "https://token.actions.githubusercontent.com"
slsa_provenance:
type: github_release
asset: multiple.intoto.jsonl
- type: github_release
repo_owner: aquasecurity
repo_name: chain-bench
Expand Down Expand Up @@ -46672,18 +46733,16 @@ packages:
repo_name: ghcup-hs
url: https://downloads.haskell.org/~ghcup/{{trimV .Version}}/{{.Arch}}-{{.OS}}-ghcup-{{trimV .Version}}
format: raw
windows_arm_emulation: true
link: https://www.haskell.org/ghcup/
description: GHCup is an installer for the general purpose language Haskell
replacements:
arm64: aarch64
amd64: x86_64
darwin: apple-darwin
windows: mingw64
files:
- name: ghcup
Comment on lines 46734 to 46745

@coderabbitai coderabbitai Bot Jun 14, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

base="https://downloads.haskell.org/~ghcup/0.2.5.0"
for asset in x86_64-mingw64-ghcup-0.2.5.0 x86_64-mingw64-ghcup-0.2.5.0.exe; do
  code="$(curl -fsSIL -o /dev/null -w '%{http_code}' "$base/$asset" || true)"
  printf '%s -> %s\n' "$asset" "$code"
done

Repository: jdx/mise

Length of output: 195

🏁 Script executed:

cd vendor/aqua-registry && cat -n registry.yml | sed -n '46720,46760p'

Repository: jdx/mise

Length of output: 1777

🏁 Script executed:

cd vendor/aqua-registry && git log --oneline -20 -- registry.yml

Repository: jdx/mise

Length of output: 86

🏁 Script executed:

cd vendor/aqua-registry && git show 19cf60d3 -- registry.yml | grep -A 20 -B 5 'ghcup-hs' | head -50

Repository: jdx/mise

Length of output: 931

🏁 Script executed:

cd vendor/aqua-registry && git show HEAD~1:registry.yml 2>/dev/null | grep -A 15 'ghcup-hs' || echo "Previous version not found or ghcup-hs not in previous version"

Repository: jdx/mise

Length of output: 115

The .exe suffix is required for Windows downloads; the current replacement produces a 404.

The windows: mingw64 replacement on line 46743 combined with the URL template on line 46734 generates x86_64-mingw64-ghcup-<version>, but the Haskell downloads server publishes x86_64-mingw64-ghcup-<version>.exe. This breaks Windows artifact downloads. Add a Windows-specific URL override or include .exe in the template for Windows builds.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@vendor/aqua-registry/registry.yml` around lines 46734 - 46745, The Windows
downloads for GHCup fail because the URL template for the file at line 46734
does not include the `.exe` file extension that is required by the Haskell
downloads server. The current `windows: mingw64` replacement at line 46743
generates the stem `x86_64-mingw64-ghcup-<version>`, but the actual Windows
executable file is `x86_64-mingw64-ghcup-<version>.exe`. Add a Windows-specific
URL override in the registry configuration that appends the `.exe` extension to
the filename for Windows builds, or modify the template structure to
conditionally include `.exe` for Windows platforms while keeping other operating
systems unchanged.

src: "{{.Arch}}-{{.OS}}-ghcup-{{trimV .Version}}"
supported_envs:
- linux
- darwin
- type: github_release
repo_owner: hasura
repo_name: graphql-engine
Expand Down
Loading