-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
chore: release 2026.3.4 #8469
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weβll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore: release 2026.3.4 #8469
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -9,7 +9,7 @@ _mise() { | |
|
|
||
| local cur prev words cword was_split comp_args | ||
| _comp_initialize -n : -- "$@" || return | ||
| local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_3_3.spec" | ||
| local spec_file="${TMPDIR:-/tmp}/usage__usage_spec_mise_2026_3_4.spec" | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The completion script uses a predictable filename in a world-writable directory ( |
||
| if [[ ! -f "$spec_file" ]]; then | ||
| mise usage >| "$spec_file" | ||
| fi | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -8,7 +8,7 @@ if ! type -p usage &> /dev/null | |
| return 1 | ||
| end | ||
| set -l tmpdir (if set -q TMPDIR; echo $TMPDIR; else; echo /tmp; end) | ||
| set -l spec_file "$tmpdir/usage__usage_spec_mise_2026_3_3.spec" | ||
| set -l spec_file "$tmpdir/usage__usage_spec_mise_2026_3_4.spec" | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The completion script uses a predictable filename in a world-writable directory ( |
||
| if not test -f "$spec_file" | ||
| mise usage | string collect > "$spec_file" | ||
| end | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -10,7 +10,7 @@ Register-ArgumentCompleter -Native -CommandName 'mise' -ScriptBlock { | |
| param($wordToComplete, $commandAst, $cursorPosition) | ||
|
|
||
| $tmpDir = if ($env:TEMP) { $env:TEMP } else { [System.IO.Path]::GetTempPath() } | ||
| $specFile = Join-Path $tmpDir "usage__usage_spec_mise_2026_3_3.kdl" | ||
| $specFile = Join-Path $tmpDir "usage__usage_spec_mise_2026_3_4.kdl" | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The completion script uses a predictable filename in a temporary directory to store a spec file. This is vulnerable to a local symlink attack, where an attacker could create a symlink at this path pointing to a sensitive file, causing |
||
|
|
||
| if (-not (Test-Path $specFile)) { | ||
| mise usage | Out-File -FilePath $specFile -Encoding utf8 | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,44 @@ | ||
| # yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/registry.json | ||
| packages: | ||
| - type: github_release | ||
| repo_owner: datadog-labs | ||
| repo_name: pup | ||
| description: Give your AI agent a Pup β a CLI companion with 200+ commands across 33+ Datadog products | ||
| version_constraint: "false" | ||
| version_overrides: | ||
| - version_constraint: semver("<= 0.21.0") | ||
| asset: pup_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} | ||
| format: tar.gz | ||
| windows_arm_emulation: true | ||
| replacements: | ||
| amd64: x86_64 | ||
| darwin: Darwin | ||
| linux: Linux | ||
| windows: Windows | ||
| checksum: | ||
| type: github_release | ||
| asset: pup_{{trimV .Version}}_checksums.txt | ||
| algorithm: sha256 | ||
| - version_constraint: "true" | ||
| asset: pup_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}} | ||
| format: tar.gz | ||
| replacements: | ||
| amd64: x86_64 | ||
| darwin: Darwin | ||
| linux: Linux | ||
| checksum: | ||
| type: github_release | ||
| asset: pup_{{trimV .Version}}_checksums.txt | ||
| algorithm: sha256 | ||
| cosign: | ||
| opts: | ||
| - --certificate-identity-regexp | ||
| - "^https://github\\.com/datadog-labs/pup/\\.github/workflows/.+\\.ya?ml@refs/tags/\\Q{{.Version}}\\E$" | ||
| - --certificate-oidc-issuer | ||
| - https://token.actions.githubusercontent.com | ||
| bundle: | ||
| type: github_release | ||
| asset: pup_{{trimV .Version}}_checksums.txt.sigstore.json | ||
| supported_envs: | ||
| - linux | ||
| - darwin |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,19 @@ | ||
| # yaml-language-server: $schema=https://raw.githubusercontent.com/aquaproj/aqua/main/json-schema/registry.json | ||
| packages: | ||
| - type: github_release | ||
| repo_owner: k1LoW | ||
| repo_name: mo | ||
| description: mo is a Markdown viewer that opens .md files in a browser | ||
| version_constraint: "false" | ||
| version_overrides: | ||
| - version_constraint: "true" | ||
| asset: mo_{{.Version}}_{{.OS}}_{{.Arch}}.{{.Format}} | ||
| format: tar.gz | ||
| windows_arm_emulation: true | ||
| checksum: | ||
| type: github_release | ||
| asset: checksums.txt | ||
| algorithm: sha256 | ||
| overrides: | ||
| - goos: darwin | ||
| format: zip |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The completion script uses a predictable filename in a world-writable directory (
/tmpor$TMPDIR) to store a spec file. This is vulnerable to a local symlink attack, where an attacker could create a symlink at this path pointing to a sensitive file, causingmise usageto overwrite it when completions are triggered. Consider using a user-specific directory like~/.cache/mise/completionsinstead.