chore: release 2026.7.0 by mise-en-dev · Pull Request #10638 · jdx/mise

mise-en-dev · 2026-06-26T08:20:38Z

🚀 Features

(bootstrap) prune unmanaged brew formulae by @jdx in #10618
(brew) add support for font artifact types and extend non-install artifacts by @roele in #10671
(env) enable shell expansion by default by @jdx in #10702
(github) allow disabling attestations per tool by @jdx in #10694
(monorepo) add install union and unified lockfiles by @jdx in #10707
(task) support mounted usage specs in file tasks by @jdx in #10704
(upgrade) show release date and eligibility in minimum_release_age warning by @jdx in #10705
Android asset detection by @bltavares in #10653

🐛 Bug Fixes

(aqua) resolve bin paths with v-prefixed overrides by @jdx in #10696
(aqua) download private release assets via the GitHub API asset endpoint by @yacchi in #10622
(brew-cask) handle raw binaries, $APPDIR paths, and app bundle copying by @arthurh4 in #10626
(config) preserve set values in config set by @KrishRVH in #10647
(config) use vars in task include templates by @jdx in #10700
(config) support required and redacted vars by @jdx in #10697
(copr) drop retired Fedora 42 chroots by @jdx in #10698
(dotnet) validate SDK installs with list-sdks by @jdx in #10691
(generate) respect lockfile_platforms for tool stubs by @JamBalaya56562 in #10709
(github) handle missing lockfile url_api by @jdx in #10703
(hooks) set MISE_INSTALLED_TOOLS to [] on no-op install (keep running postinstall) by @JamBalaya56562 in #10615
(http) don't let netrc clobber forge tokens for un-redirected URLs by @yacchi in #10713
(install) respect lockfile backend during locked installs by @risu729 in #10599
(install) suggest source install for unsupported arches by @risu729 in #10627
(install-into) refuse to overwrite a non-empty target directory without --yes by @JamBalaya56562 in #10630
(lockfile) merge platform data when a tool's options newly diverge from an empty on-disk entry by @JamBalaya56562 in #10710
(npm) support allow_builds with npm allow-scripts by @jdx in #10690
(oci) resolve host install symlinks and symlinked paths during PATH rebasing by @salim-b in #10624
(oci) account for darwin mode stripping by @laozc in #10681
(sigstore) retry GitHub attestations with TUF root by @jdx in #10695
(task) render monorepo subproject task templates with their own env by @jdx in #10706
(task) correct env for task.show_full_cmd setting by @muzimuzhi in #10714
(vfox) make os.getenv use mise env by @jdx in #10719
(watch) forward --ignore, --ignore-file, and --print-events to watchexec by @JamBalaya56562 in #10629
stop forcing no-yjit ruby on older glibc by @jdx in #10620
allow GHCUp to be installed on Windows by @cprecioso in #10670

🧪 Testing

(task) avoid pipefail in trust include assertions by @jdx in #10708

📦️ Dependency Updates

update ghcr.io/jdx/mise:alpine docker digest to 7cdf593 by @renovate[bot] in #10632
update ghcr.io/jdx/mise:deb docker digest to 7f8a538 by @renovate[bot] in #10633
update rattler by @renovate[bot] in #10637
update ghcr.io/jdx/mise:rpm docker digest to 4d4b300 by @renovate[bot] in #10634
update rust-lang/crates-io-auth-action action to v1.0.5 by @renovate[bot] in #10636
update rust docker digest to 6df234c by @renovate[bot] in #10635
update rust crate itertools to 0.15 by @renovate[bot] in #10639
update actions/checkout action to v7 by @renovate[bot] in #10641
update dependency @types/node to v26 by @renovate[bot] in #10642
update ubuntu docker tag to resolute-20260610 by @renovate[bot] in #10649
update actions/cache digest to caa2961 by @renovate[bot] in #10652
update sigstore-verify to 0.10.0 by @sinelaw in #10677
group sigstore renovate updates by @jdx in #10693

📦 Registry

disable jc test by @jdx in #10701

Chore

(ci) make nightly rust informational by @jdx in #10689

Security

ignore quick-xml advisories pending upstream fixes by @jdx in #10717

New Contributors

@yacchi made their first contribution in #10713
@bltavares made their first contribution in #10653
@sinelaw made their first contribution in #10677
@KrishRVH made their first contribution in #10647
@arthurh4 made their first contribution in #10626

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (4)

coderabbitai · 2026-06-26T08:20:57Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

📝 Walkthrough

Walkthrough

Bumped mise to 2026.6.16 across release notes, package and packaging metadata, README output, docs site data, vendor metadata, and shell completion spec filenames.

Changes

2026.6.16 release refresh

Layer / File(s)	Summary
Release metadata `CHANGELOG.md`, `Cargo.toml`, `README.md`, `default.nix`, `docs/.vitepress/stars.data.ts`, `packaging/rpm/mise.spec`, `snapcraft.yaml`, `vendor/aqua-registry/metadata.json`	`CHANGELOG.md` adds the 2026.6.16 release entry, and the manifest, packaging, README, docs site data, and vendor metadata files update their version, star, or tag values to match.
Completion spec rotation `completions/_mise`, `completions/mise.bash`, `completions/mise.fish`, `completions/mise.ps1`	The shell completion scripts now reference the 2026_6_16 usage spec filename.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

jdx/mise#10619: Also updates the release version and rotates the shell completion usage spec filenames for a nearby release bump.
jdx/mise#10594: Touches the same completion spec filename update path for a prior mise release bump.
jdx/mise#10440: Updates the same release metadata files and completion scripts across manifests, packaging, and shell completions.

Poem

A hop, a skip, a version bright,
2026.6.16 shines in sight.
I nibble specs and thump the floor,
Then bash, fish, zsh sing once more. 🐇

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The title references release 2026.7.0, but the actual changeset is a 2026.6.16 release update.	Rename it to match the real release version, e.g. "chore: release 2026.6.16".

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

greptile-apps · 2026-06-26T08:21:59Z

Greptile Summary

This is the automated release PR for mise 2026.7.0, bumping the version across all packaging manifests (Cargo.toml, default.nix, snapcraft.yaml, RPM spec) and adding the corresponding CHANGELOG entry. It also includes an updated aqua registry (6 new packages, 4 updates, 2 repo migrations), expanded url_api fields in mise.lock, and a new Node.js GPG signing key.

Version bumped consistently from 2026.6.15 → 2026.7.0 in all packaging files.
mise.lock gains url_api fields for GitHub-attested tools, supporting the new lockfile URL handling introduced in this cycle.
Aqua registry adds aaif-goose/goose, colbymchenry/codegraph, kayac/lamvms, mxschmitt/playwright-go, twitchdev/twitch-cli, and whisper-sec/whisper-cli, and migrates two existing packages to new upstream repos.

Confidence Score: 5/5

Routine release PR with mechanical version bumps across all packaging files and auto-generated changelog; no logic changes.

All version bumps are consistent across Cargo.toml, Cargo.lock, default.nix, snapcraft.yaml, and the RPM spec. The mise.lock and aqua registry changes are straightforward additions.

CHANGELOG.md — the GitHub compare URL for the 2026.7.0 entry references the wrong base version.

Important Files Changed

Filename	Overview
CHANGELOG.md	New 2026.7.0 entry added, but the GitHub compare URL uses v2026.6.14 as base instead of v2026.6.15, causing the diff link to include an extra release cycle's worth of commits.
Cargo.toml	Version bumped from 2026.6.15 to 2026.7.0, consistent with the release.
src/assets/gpg/node.asc	New PGP public key block appended for Stewart X Addison (IBM), a Node.js release manager addition.
vendor/aqua-registry/registry.yml	6 new packages added, 2 packages migrated to new repos, and 4 packages updated.
mise.lock	url_api fields added to platform entries for tools with GitHub attestations.
default.nix	Version bumped from 2026.6.15 to 2026.7.0.
snapcraft.yaml	Version bumped from 2026.6.15 to 2026.7.0.
packaging/rpm/mise.spec	Version bumped from 2026.6.15 to 2026.7.0.

_{Reviews (41): Last reviewed commit: "chore: release 2026.7.0" | Re-trigger Greptile}

github-actions · 2026-06-26T08:48:05Z

Hyperfine Performance

`mise x -- echo`

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
`mise-2026.6.14 x -- echo`	21.5 ± 1.1	19.6	27.3	1.00
`mise x -- echo`	22.6 ± 1.9	20.1	53.9	1.05 ± 0.11

`mise env`

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
`mise-2026.6.14 env`	21.4 ± 1.2	19.1	26.2	1.00
`mise env`	23.3 ± 2.7	19.5	34.1	1.09 ± 0.14

`mise hook-env`

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
`mise-2026.6.14 hook-env`	25.2 ± 1.6	22.1	33.7	1.00
`mise hook-env`	25.4 ± 1.9	22.0	34.9	1.00 ± 0.10

`mise ls`

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
`mise-2026.6.14 ls`	19.7 ± 1.4	17.2	25.9	1.00
`mise ls`	19.8 ± 1.2	17.7	24.7	1.00 ± 0.09

`xtasks/test/perf`

Command	mise-2026.6.14	mise	Variance
install (cached)	143ms	145ms	-1%
ls (cached)	64ms	66ms	-3%
bin-paths (cached)	71ms	68ms	+4%
task-ls (cached)	148ms	149ms	+0%

github-actions · 2026-07-01T00:26:28Z

This PR currently has failing checks. If this continues for 7 days, it will be closed automatically.

This is warning day 1 of 7.

Please update the PR when you have a chance. Feel free to reopen or create a new PR if it is closed and you'd like to continue working on it.

This comment was generated by an automated workflow.

github-actions · 2026-07-02T00:26:24Z

This PR currently has failing checks. If this continues for 7 days, it will be closed automatically.

This is warning day 1 of 7.

Please update the PR when you have a chance. Feel free to reopen or create a new PR if it is closed and you'd like to continue working on it.

This comment was generated by an automated workflow.

mise-en-dev added the release label Jun 26, 2026

mise-en-dev force-pushed the release branch from 2e96025 to d957c66 Compare June 26, 2026 08:28

mise-en-dev force-pushed the release branch 9 times, most recently from d857712 to 89800b6 Compare June 30, 2026 00:35

mise-en-dev force-pushed the release branch from 89800b6 to 8a0e857 Compare July 1, 2026 12:25

mise-en-dev changed the title ~~chore: release 2026.6.16~~ chore: release 2026.7.0 Jul 1, 2026

mise-en-dev force-pushed the release branch 6 times, most recently from 9ffc71a to a38e408 Compare July 1, 2026 21:42

sinelaw mentioned this pull request Jul 1, 2026

Attestation fails on 0.4.2 sinelaw/fresh#2528

Closed

mise-en-dev force-pushed the release branch 6 times, most recently from 3070d0a to 0756486 Compare July 1, 2026 23:17

mise-en-dev force-pushed the release branch 4 times, most recently from e26ea5d to e14d484 Compare July 1, 2026 23:56

mise-en-dev force-pushed the release branch 8 times, most recently from b4961f6 to 8a15209 Compare July 2, 2026 09:10

jdx enabled auto-merge (squash) July 2, 2026 13:53

mise-en-dev force-pushed the release branch 3 times, most recently from 123eb60 to 38c6eba Compare July 2, 2026 14:23

chore: release 2026.7.0

2c420d4

mise-en-dev force-pushed the release branch from 38c6eba to 2c420d4 Compare July 2, 2026 14:50

jdx merged commit 857b73f into main Jul 2, 2026
77 of 79 checks passed

jdx deleted the release branch July 2, 2026 15:46

coderabbitai Bot mentioned this pull request Jul 6, 2026

chore: release 2026.7.1 #10725

Merged

Navigation Menu

Repository navigation

chore: release 2026.7.0 - #10638

chore: release 2026.7.0#10638
jdx merged 1 commit into
mainfrom
release

mise-en-dev commented Jun 26, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Jun 26, 2026 •

edited

Loading

Reviews paused

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Poem

❌ Failed checks (1 warning)

Uh oh!

greptile-apps Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

mise-en-dev commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🚀 Features

🐛 Bug Fixes

🧪 Testing

📦️ Dependency Updates

📦 Registry

Chore

Security

New Contributors

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (4)

Uh oh!

coderabbitai Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Poem

❌ Failed checks (1 warning)

Uh oh!

greptile-apps Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

github-actions Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hyperfine Performance

mise x -- echo

mise env

mise hook-env

mise ls

xtasks/test/perf

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

mise-en-dev commented Jun 26, 2026 •

edited

Loading

coderabbitai Bot commented Jun 26, 2026 •

edited

Loading

greptile-apps Bot commented Jun 26, 2026 •

edited

Loading

github-actions Bot commented Jun 26, 2026 •

edited

Loading

`mise x -- echo`

`mise env`

`mise hook-env`

`mise ls`

`xtasks/test/perf`