fix(deps): update dependency jdx/mise to v2026.3.16 by renovate[bot] · Pull Request #30 · codize-dev/sandbox

renovate · 2026-03-30T08:00:46Z

This PR contains the following updates:

Package	Update	Change	Pending
jdx/mise	minor	`2026.2.23` → `2026.3.16`	`2026.3.17`

Release Notes

jdx/mise (jdx/mise)

`v2026.3.16`

Compare Source

🐛 Bug Fixes

(backend) skip GitHub API call for cosign when disabled or unconfigured by @jdx in #8753

📦 Aqua Registry Updates

New Packages (1)

wasm-bindgen/wasm-pack

Updated Packages (10)

`v2026.3.15`

Compare Source

🚀 Features

(github) add credential_command setting for custom token retrieval by @jdx in #8746

🐛 Bug Fixes

(github) raise credential_command priority above github_tokens.toml and gh CLI by @jdx in #8748

`v2026.3.14`

Compare Source

🚀 Features

(github) add github_tokens.toml, git credential fill, and mise github token command by @jdx in #8742
(registry) add tart by @mnm364 in #8727

🐛 Bug Fixes

(python) respect precompiled flavor when excluding freethreaded builds by @risu729 in #8745
(shim) revert shims directory check that caused hangs on macOS by @jdx in e1b8ca4

📚 Documentation

(python) swap docs for python.precompiled_arch and python.precompiled_os by @risu729 in #8744

🧪 Testing

(test_tool) redirect stderr to stdout and strip ansi codes by @risu729 in #8738

New Contributors

@rtharston made their first contribution in #8731

`v2026.3.13`

Compare Source

🐛 Bug Fixes

(env) improve hook-env watch_files tracking and early-exits by @rpendleton in #8716
(install) create runtime symlinks in system/shared install directories by @jdx in #8722
apply --silent flag to global settings to suppress output by @nkakouros in #8720

📦️ Dependency Updates

ignore RUSTSEC-2026-0066 astral-tokio-tar advisory by @jdx in #8723

📦 Registry

add acli by @ggoggam in #8721

New Contributors

@rpendleton made their first contribution in #8716
@ggoggam made their first contribution in #8721

📦 Aqua Registry Updates

Updated Packages (1)

astral-sh/ty

`v2026.3.12`

Compare Source

🐛 Bug Fixes

(completions) update zsh completions for usage v3.1.0 by @jdx in #8715

Security

(lock) block github tool upgrade when provenance is lost by @jdx in #8706

`v2026.3.11`

Compare Source

🚀 Features

(github) read tokens from gh CLI hosts.yml config by @jdx in #8692
(task) support optional args and env fields in run entries by @jdx in #8687
(task) add --skip-tools flag to mise run by @jdx in #8699
(vfox) add try_get, try_head, try_download_file to Lua HTTP module by @jdx in #8697

🐛 Bug Fixes

(config) recognize SSH and other non-HTTPS URLs in get_repo_url by @modestman in #8666
(docs) add dark mode support to favicon by @jdx in #8678
(env) support multiple --env/-E flags by @jdx in #8686
(github) rename_exe renames correct binary when archive contains multiple executables by @jdx in #8700
(implode) include system data dir in implode cleanup by @jdx in #8696
(install) skip GitHub API calls for aqua tools in --locked mode by @jdx in #8679
(install) skip redundant provenance verification when lockfile has integrity data by @jdx in #8688
(lock) respect existing platforms in lockfile when running mise lock by @jdx in #8708
(lock) skip global config lockfile by default by @jdx in #8707
(node) expand tilde in default_packages_file path by @jdx in #8709
(shell) error when no version specified instead of silent no-op by @jdx in #8693
(shim) detect shims by checking shims directory instead of binary name by @jdx in #8694
(task) inherit task_config.dir for included TOML and file tasks by @jdx in #8689
(task) strip inline args when validating run.tasks references by @jdx in #8701
(task) include idiomatic version files in monorepo task toolset by @jdx in #8702
(task) improve error message when task files are not executable by @jdx in #8705
(test) update vfox provenance test for checksum-backed skip by @jdx in #8703
improve usage spec element support in tasks by @nkakouros in #8623
make env plugin (Module) vars available in Tera template context by @victor-founder in #8682
respect MISE_COLOR=0 for color_eyre error output by @jdx in #8690
add windows support for usage tool registry by @jdx in #8713

📚 Documentation

(task) clarify interactive task blocking behavior by @jdx in #8685
improve visibility of install_before setting by @jdx in #8712

📦 Registry

add rtk (github:rtk-ai/rtk) by @bricelalu in #8683

New Contributors

@victor-founder made their first contribution in #8682
@modestman made their first contribution in #8666
@bricelalu made their first contribution in #8683

`v2026.3.10`

Compare Source

🐛 Bug Fixes

(bootstrap) preserve argv[0] for shim dispatch by @tak848 in #8521
(config) resolve trust hash collision for same-name directories by @tdragon in #8628
(docs) fix width of tools table by @himkt in #8625
(docs) prevent homepage hero atmosphere overflow by @nygmaaa in #8642
(doctor) detect PATH ordering issues when mise is activated by @jdx in #8585
(git) use origin as remote name by @bentinata in #8626
(installer) normalize current version before comparison by @tak848 in #8649
(lockfile) Resolve symlink when updating lockfiles by @chancez in #8589
(python) verify checksums for precompiled binary downloads by @malept in #8593
(python) exclude freethreaded builds from precompiled selection by @jdx in #8672
(rust) resolve relative CARGO_HOME/RUSTUP_HOME to absolute paths by @simonepri in #8604
(task) correctly resolve task name for _default files with extensions by @youta1119 in #8646
(tasks) global file tasks not properly marked as such by @roele in #8618
(tasks) handle broken pipe in table print and task completion output by @vmaleze in #8608
use dark/light logo variants in README for GitHub dark mode by @jdx in #8656
failing rebuild of runtime symlinks for shared tools by @roele in #8647
add spaces around current element operator in flutter version_expr by @roele in #8616
complete task arguments correctly by @KevSlashNull in #8601
remove hidden --prefix, --interleave from mise run by @nkakouros in #8669

📚 Documentation

switch body font to DM Sans and darken dark mode background by @jdx in 6e3ad34
use Cormorant Garamond for headers and Roc Grotesk for body text by @jdx in 010812a
resolve chaotic heading hierarchy in task-arguments.md by @muzimuzhi in #8644
add missing v-pre directive to Tera {{ }} expressions by @eitamal in #8659

🧪 Testing

fix test_java and mark as slow by @roele in #8634

📦️ Dependency Updates

update docker/dockerfile:1 docker digest to 4a43a54 by @renovate[bot] in #8657
update ghcr.io/jdx/mise:alpine docker digest to 2584470 by @renovate[bot] in #8658
update ghcr.io/jdx/mise:deb docker digest to c9fcb75 by @renovate[bot] in #8661
update ghcr.io/jdx/mise:copr docker digest to 799d8ef by @renovate[bot] in #8660
update aws-lc-rs/aws-lc-sys and rustls-webpki by @jdx in #8674
update rust crate tar to v0.4.45 [security] by @renovate[bot] in #8668

📦 Registry

add viteplus (npm:vite-plus) by @risu729 in #8594
remove backend.options for podman by @roele in #8633
add pi.dev coding agent by @dector in #8635
add ormolu (github:tweag/ormolu) by @3w36zj6 in #8617
use version_expr for dart and sort versions by @roele in #8631
fix go-getter and mysql CI failures by @jdx in #8662
add qwen (npm:@qwen-code/qwen-code) by @jianglu in #8667
add hlint (github:ndmitchell/hlint) by @3w36zj6 in #8670

New Contributors

@nkakouros made their first contribution in #8669
@jianglu made their first contribution in #8667
@tak848 made their first contribution in #8521
@bentinata made their first contribution in #8626
@tdragon made their first contribution in #8628
@nygmaaa made their first contribution in #8642
@youta1119 made their first contribution in #8646
@chancez made their first contribution in #8589
@dector made their first contribution in #8635

📦 Aqua Registry Updates

New Packages (8)

Updated Packages (8)

`v2026.3.9`

Compare Source

🚀 Features

(github) use release latest endpoint to get latest release by @roele in #8516
(install) add shared and system install directories by @jdx in #8581
(vfox) add provenance metadata to lockfile for tool plugins by @malept in #8544

🐛 Bug Fixes

(aqua) expose main binary when files field is empty and symlink_bins is enabled by @AlexanderTheGrey in #8550
(env) redact secrets in mise set listing and task-specific env by @jdx in #8583
(prepare) install config tools before running prepare steps by @jdx in #8582
(task) allow ctrl-c to interrupt tool downloads during mise run by @jdx in #8571
(tasks) add file task header parser support for spaces around = by @roele in #8574

📚 Documentation

(task) add property description for interactive by @roele in #8562
add missing </bold> closing tag by @muzimuzhi in #8564
rebrand site with new chef logo and warm culinary palette by @jdx in #8587

📦️ Dependency Updates

update ghcr.io/jdx/mise:alpine docker digest to de4657e by @renovate[bot] in #8577
update ghcr.io/jdx/mise:copr docker digest to eef29a2 by @renovate[bot] in #8578
update ghcr.io/jdx/mise:rpm docker digest to 5a96587 by @renovate[bot] in #8580
update ghcr.io/jdx/mise:deb docker digest to 464cf7c by @renovate[bot] in #8579

📦 Registry

fix flatc version test mismatch by @jdx in #8588

Chore

(registry) skip spark test-tool by @jdx in #8572

New Contributors

@AlexanderTheGrey made their first contribution in #8550

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (2)

`v2026.3.8`

Compare Source

🐛 Bug Fixes

(backend) skip cosign provenance in lockfile for opts-only aqua tools by @jdx in #8559
(exec) resolve wrapper recursion when shims are in PATH by @jdx in #8560

📦 Registry

add turbo by @igas in #8553
add workmux by @ifraixedes in #8555

Chore

(tmux) use aqua backend for tmux by @himkt in #8558

New Contributors

@himkt made their first contribution in #8558
@ifraixedes made their first contribution in #8555
@igas made their first contribution in #8553

📦 Aqua Registry Updates

New Packages (1)

raaymax/lazytail

Updated Packages (8)

`v2026.3.7`

Compare Source

🐛 Bug Fixes

(conda) exclude transitive dependency binaries from PATH by @simonepri in #8543

New Contributors

@simonepri made their first contribution in #8543

📦 Aqua Registry Updates

New Packages (1)

stackrox/stackrox/roxctl

Updated Packages (7)

`v2026.3.6`

Compare Source

🐛 Bug Fixes

(activate) reorder shims to front of PATH on re-source in fish by @jdx in #8534
(backend) strip mise shims from dependency_env PATH to prevent fork bomb by @pose in #8475
(github) resolve "latest" version correctly via GitHub API by @jdx in #8532
(lock) set env tags and clarify lockfile docs by @jdx in #8519
(lock) use separate mise..lock files instead of env tags by @jdx in #8523
(task) include args in task output prefix and truncate long prefixes by @jdx in #8533
(task) only include args in task prefix when disambiguating duplicates by @jdx in #8536
(test) pin goreleaser version in attestation e2e test by @jdx in #8518
(windows) env._.source needs to run bash.exe on Windows (fix #6513) by @pjeby in #8520
handle locked .exe shims on Windows during reshim by @davireis in #8517

🚜 Refactor

(prepare) remove touch_outputs and update docs to reflect blake3 hashing by @jdx in #8535

📚 Documentation

(docker) replace jdxcode/mise image with curl install, update to debian:13-slim by @jdx in #8526
fix "gzip: stdin is encrypted" error in shell tricks cookbook by @pjeby in #8512

📦 Registry

add tigerbeetle (github:tigerbeetle/tigerbeetle) by @risu729 in #8514

New Contributors

@pjeby made their first contribution in #8520
@davireis made their first contribution in #8517
@Aurorxa made their first contribution in #8511

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (1)

moonrepo/moon

`v2026.3.5`

Compare Source

🚀 Features

(vfox) add RUNTIME.envType for libc variant detection by @malept in #8493
store provenance verification results in lockfile by @jdx in #8495

🐛 Bug Fixes

(env) skip remote version fetching for "latest" in prefer-offline mode by @jdx in #8500
(tasks) deduplicate shared deps across task delegation by @vadimpiven in #8497
(windows) correctly identify mise binary without extension by @jdx in #8503

🚜 Refactor

(core) migrate cmd! callers to async with kill_on_drop by @jdx in a63f7d2

📦 Registry

add portless (npm:portless) by @risu729 in #8508

Chore

(ci) temporarily disable mise up in release-plz by @jdx in #8504
consolidate all linters into hk.pkl by @jdx in #8498

📦 Aqua Registry Updates

New Packages (1)

apache/ant

`v2026.3.4`

Compare Source

🚀 Features

(github) keep exe extensions on Windows by @iki in #8424
(task) add interactive field for exclusive terminal access by @jdx in #8491
add header comment to generated lockfiles by @ivy in #8481
runtime musl/glibc detection for correct libc variant selection by @jdx in #8490

🐛 Bug Fixes

(github) use registry platform options during install by @jdx in #8492
(http) store tool opts as native TOML to fix platform switching by @jdx in #8448
(installer) error if MISE_INSTALL_PATH is a directory by @jdx in #8468
(prepare) resolve sources/outputs relative to dir when set by @jdx in #8472
(ruby) fetch precompiled binary by release tag instead of listing all releases by @jdx in #8488
(schema) support structured objects in task depends by @risu729 in #8463
(task) replace println!/eprintln! with calm_io in task output macros by @vmaleze in #8485
handle scoped npm package names without backend prefix by @jdx in #8477

📦️ Dependency Updates

update ghcr.io/jdx/mise:copr docker digest to c485c4c by @renovate[bot] in #8484
update ghcr.io/jdx/mise:alpine docker digest to 8118bc7 by @renovate[bot] in #8483

📦 Registry

disable sd version test by @jdx in #8489

New Contributors

@ivy made their first contribution in #8481
@iki made their first contribution in #8424

📦 Aqua Registry Updates

New Packages (5)

Updated Packages (6)

`v2026.3.3`

Compare Source

🐛 Bug Fixes

(installer) guard zstd archive selection on zstd binary availability by @octo in #8460

New Contributors

@octo made their first contribution in #8460

`v2026.3.2`

Compare Source

🚀 Features

add --local flag to outdated and upgrade commands by @malept in #8451

🐛 Bug Fixes

(env) apply redactions for env vars with both tools=true and redact=true by @jdx in #8449
(prepare) render tera templates in prepare.env values by @jdx in #8450
correct regex syntax in tar/zstd version check by @chadlwilson in #8453

🚜 Refactor

prevent double-iteration when parsing idiomatic version files by @risu729 in #8417

🧪 Testing

(tasks) stabilize assertions and shell compatibility by @mackwic in #8438

📦 Registry

add tinygo (aqua:tinygo-org/tinygo) by @artemklevtsov in #8446

📦 Aqua Registry Updates

New Packages (1)

kunobi-ninja/kunobi

`v2026.3.1`

Compare Source

🐛 Bug Fixes

(activate) always prepend shims to front of PATH in --shims mode by @ctaintor in #8757

`v2026.3.0`

Compare Source

🚀 Features

(hooks) add task references to hooks and watch_files by @jdx in #8400
(prepare) add git-submodule built-in provider by @jdx in #8407
(prepare) add human-readable stale reasons to prepare output by @jdx in #8408
(prepare) add dependency ordering to prepare steps by @jdx in #8401
(prepare) add --explain flag for provider diagnostics by @jdx in #8409
(prepare) add per-provider timeout support by @jdx in #8405
(prepare) add blake3 content-hash freshness checking by @jdx in #8404
(tasks) monorepo vars and per-task vars by @halms in #8248

🐛 Bug Fixes

(aqua) restore bin_paths disk cache with fresh_file invalidation by @jdx in #8398
(idiomatic) use generic parser for idiomatic files by @risu729 in #8171
(install) apply precompiled options to all platforms in lockfile by @jdx in #8396
(install) normalize "v" prefix when matching lockfile versions by @jdx in #8413
(prepare) improve git submodule parser and fix check_staleness error handling by @jdx in #8412
(python) respect precompiled settings in lock file generation by @jdx in #8399
(python) clarify uv_venv_auto docs + prevent uv shim recursion in venv creation by @halms in #8402
(task) remove deprecated # mise task header syntax by @jdx in #8403
(vfox) avoid eager metadata loading during config file detection by @jdx in #8397
clarify GitHub attestations to be artifact ones by @scop in #8394
ignore comments in idiomatic version files by @iloveitaly in #7682

🚜 Refactor

unify archive detection by @risu729 in #8137

📚 Documentation

remove duplicated docs for npm.package_manager by @risu729 in #8414

`v2026.2.24`

Compare Source

🐛 Bug Fixes

(aqua) remove unnecessary bin_paths disk cache by @jdx in #8383
(hooks) render tera templates and fix output masking by @jdx in #8385
(install) improve error when registry tool has no supported backends by @jdx in #8388
(python) remove deprecated venv_auto_create setting by @jdx in #8384

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-03-30T08:05:48Z

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Jump: v2026.2.23 → v2026.3.16 (spans 21 releases from March 2-27, 2026)

Major Changes:

Security Enhancements: Lockfile provenance tracking and verification (v2026.3.12, v2026.3.5)
Task System Improvements: Interactive task support, args/env in run entries, monorepo task variables
Prepare Step Features: Git submodule support, blake3 content-hash checking, dependency ordering
Python Backend: Improved precompiled binary handling with checksum verification, freethreaded build exclusion
GitHub Backend: Enhanced token management (credential_command, github_tokens.toml, gh CLI integration)
Environment Variables: Better redaction support, multiple -E flag support

Breaking Changes:

❌ Removed python.venv_auto_create setting (v2026.3.8) - deprecated feature
❌ Removed old # mise task header syntax (v2026.3.0) - deprecated feature
⚠️ Lockfile format changes to support env-specific files and provenance metadata (backward compatible for reading)

Security Fixes:

GitHub attestation verification improvements
Cosign provenance checking enhancements
Lockfile integrity tracking to prevent provenance loss during upgrades
RUSTSEC-2026-0066 (tar advisory) addressed

Bug Fixes: 100+ bug fixes across aqua, github, vfox, python, ruby, node, rust, and other backends

🎯 Impact Scope Investigation

Usage Analysis:

Dockerfile Usage (Primary concern):
- Downloads mise binary directly from GitHub releases
- Uses mise use -g <runtime>@<version> for Node.js, Ruby, Go, Python, Rust installation
- Uses mise settings ruby.compile=false configuration
- Sets MISE_DATA_DIR="/mise"
- ✅ All commands remain stable and unchanged
mise.toml Configuration:
- Defines tools: go@1.26.1, golangci-lint@2.10.1 (aqua), lefthook@2.1.4 (aqua), hadolint@2.14.0 (aqua)
- ✅ Aqua backend compatibility confirmed in release notes
CI/CD Integration:
- Uses jdx/mise-action@v3.6.3 in GitHub Actions workflows
- ✅ No changes to GitHub Action integration

Deprecated Feature Check:

✅ venv_auto_create: NOT USED in this project
✅ Old task header syntax: NO task files present
✅ No lockfiles currently in use (backward compatible anyway)

Dependency Impact:

✅ No impact on other Go dependencies
✅ Runtime version management unchanged (Node 24.14.0, Ruby 3.4.8, Go 1.26.0, Python 3.13.12, Rust 1.94.0)

💡 Recommended Actions

Immediate Actions:

✅ Merge this PR - The update is safe and backward compatible
✅ No code changes required - Project doesn't use any deprecated features
✅ CI will validate - Existing CI pipeline will verify compatibility through lint, build, unit tests, and E2E tests

Post-Merge Verification:

Monitor CI/CD pipeline execution after merge
Verify Docker build completes successfully with new mise version
Confirm E2E tests pass on both ubuntu-latest and ubuntu-24.04-arm runners

Optional Enhancements (Not required for this PR):

Consider adopting lockfile support for reproducible builds (new provenance features)
Explore new task system features for potential workflow improvements
Review security enhancements for production use cases

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

fix(deps): update dependency jdx/mise to v2026.3.16

813f93d

koki-develop merged commit e91347b into main Mar 30, 2026
6 of 8 checks passed

koki-develop deleted the renovate/jdx-mise-2026.x branch March 30, 2026 08:08

codize-release-please bot mentioned this pull request Mar 30, 2026

chore(main): release 0.7.2 #29

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency jdx/mise to v2026.3.16#30

fix(deps): update dependency jdx/mise to v2026.3.16#30
koki-develop merged 1 commit intomainfrom
renovate/jdx-mise-2026.x

renovate bot commented Mar 30, 2026

Uh oh!

github-actions bot commented Mar 30, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate bot commented Mar 30, 2026

Release Notes

🐛 Bug Fixes

📦 Aqua Registry Updates

New Packages (1)

Updated Packages (10)

🚀 Features

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🧪 Testing

New Contributors

🐛 Bug Fixes

📦️ Dependency Updates

📦 Registry

New Contributors

📦 Aqua Registry Updates

Updated Packages (1)

🐛 Bug Fixes

Security

🚀 Features

🐛 Bug Fixes

📚 Documentation

📦 Registry

New Contributors

🐛 Bug Fixes

📚 Documentation

🧪 Testing

📦️ Dependency Updates

📦 Registry

New Contributors

📦 Aqua Registry Updates

New Packages (8)

Updated Packages (8)

🚀 Features

🐛 Bug Fixes

📚 Documentation

📦️ Dependency Updates

📦 Registry

Chore

New Contributors

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (2)

🐛 Bug Fixes

📦 Registry

Chore

New Contributors

📦 Aqua Registry Updates

New Packages (1)

Updated Packages (8)

🐛 Bug Fixes

New Contributors

📦 Aqua Registry Updates

New Packages (1)

Updated Packages (7)

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

📦 Registry

New Contributors

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (1)

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📦 Registry

Chore

📦 Aqua Registry Updates

New Packages (1)

🚀 Features

🐛 Bug Fixes

📦️ Dependency Updates

📦 Registry

New Contributors

📦 Aqua Registry Updates

New Packages (5)