Skip to content

fix(deps): update dependency jdx/mise to v2026.5.0#65

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/jdx-mise-2026.x
Open

fix(deps): update dependency jdx/mise to v2026.5.0#65
renovate[bot] wants to merge 1 commit intomainfrom
renovate/jdx-mise-2026.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 8, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change Pending
jdx/mise minor 2026.4.11 → 2026.5.0 2026.5.5 (+4)

Release Notes

jdx/mise (jdx/mise)

v2026.5.0

Compare Source

🚀 Features
🐛 Bug Fixes
  • (backend) flag regex prerelease versions by @​jdx in #​9500
  • (backend) mark -nightly/-canary/-experimental as prereleases by @​jdx in #​9523
  • (backend) suppress no-versions warning for unresolved-latest backends by @​jdx in #​9548
  • (backend) include dotnet prereleases from package flags by @​jdx in #​9551
  • (backend) scope PEP 440 prerelease detection to Python backends by @​jdx in #​9558
  • (cargo) Apply install_env during cargo install by @​c22 in #​9502
  • (copr) drop epel-9 chroots since rust >= 1.91 is unavailable by @​jdx in #​9484
  • (github) skip attestations on non-default api_url by @​jdx in #​9486
  • (github) retry ip allow list errors without auth by @​risu729 in #​9506
  • (http) update versions host tracking endpoint by @​jdx in #​9527
  • (install) don't warn for configured tools when version is passed via CLI by @​jdx in #​9522
  • (install) refresh latest before installing missing tools by @​jdx in #​9545
  • (install) don't cache nonexistent install paths by @​jdx in #​9553
  • (lockfile) don't propagate ad-hoc CLI overrides into the project lockfile by @​jdx in #​9562
  • (plugin) detect plugin types after cloning by @​risu729 in #​9540
  • (release) pass --no-git-checks to aube publish by @​jdx in #​9483
  • (task) convert PATH to MSYS Unix form when spawning POSIX shells on Windows by @​JamBalaya56562 in #​9547
📚 Documentation
🧪 Testing
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2026.4.28

Compare Source

🐛 Bug Fixes
  • (copr) remove stale pinned image digest and rebuild copr image on Dockerfile changes by @​bestagi in #​9451
  • (task) avoid gix panic when cloning a remote task by commit SHA by @​jdx in #​9473

v2026.4.27

Compare Source

🚀 Features
🐛 Bug Fixes
  • (backend) Don't cache empty version lists by @​c22 in #​9444
  • (shims) compare PATH entries case-insensitively on macOS by @​jdx in #​9468
  • (task) preserve essential env vars under deny_env on Linux by @​jdx in #​9467
Chore
New Contributors
📦 Aqua Registry Updates
New Packages (7)
Updated Packages (5)

v2026.4.25

Compare Source

🚀 Features
🐛 Bug Fixes
📚 Documentation
  • (site) add self-hosted page tracker via Cloudflare Worker, drop GoatCounter by @​jdx in #​9430
New Contributors

v2026.4.24

Compare Source

🚀 Features
  • (ls-remote) add prereleases setting and --prerelease flag by @​jdx in #​9415
🐛 Bug Fixes
  • (http) retry transient HTTP failures with backoff and warn on rescue by @​jdx in #​9414
  • (release) purge mise.en.dev CDN zone after each S3 publish by @​jdx in #​9416
📚 Documentation

v2026.4.23

Compare Source

🚀 Features
🐛 Bug Fixes
📦️ Dependency Updates
📦 Registry
Chore
New Contributors

v2026.4.22

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
🧪 Testing
📦 Aqua Registry

Updated aqua-registry: v4.498.0 -> v4.499.0.

Included aqua-registry releases:

v2026.4.21

Compare Source

🚀 Features
  • (registry) add --security flag to include security info in JSON output by @​jdx in #​9364
🐛 Bug Fixes
📚 Documentation
📦️ Dependency Updates
📦 Registry
Chore
  • (npm-publish) use aube publish instead of npm publish by @​jdx in #​9328
New Contributors

v2026.4.20

Compare Source

🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
Chore
📦 Aqua Registry

Updated aqua-registry: v4.492.0 -> v4.498.0.

Included aqua-registry releases:

v2026.4.19

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
📦 Registry
Chore
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (3)

v2026.4.18

Compare Source

🚀 Features
🐛 Bug Fixes
  • (backend) skip versions host for direct-source backends by @​jdx in #​9245
  • (github) route artifact attestation verification to custom api_url by @​jdx in #​9254
  • (lockfile) use unique temp file for atomic save to avoid concurrent rename race by @​jdx in #​9250
  • (log) drop noisy third-party debug/trace logs by @​jdx in #​9248
  • (progress) disable animated clx output in ci by @​jdx in #​9249
  • (use) honor --quiet and --silent flags by @​jdx in #​9251
  • (vfox) opt backend plugins out of --locked URL check by @​jdx in #​9252
📦 Registry
New Contributors

v2026.4.17

Compare Source

🐛 Bug Fixes
🚜 Refactor
📚 Documentation
📦️ Dependency Updates
📦 Registry
New Contributors
📦 Aqua Registry Updates
New Packages (3)
Updated Packages (1)

v2026.4.16

Compare Source

🚀 Features
🐛 Bug Fixes

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 8, 2026 •
edited
Loading

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Update: mise v2026.4.11 → v2026.5.0 (minor version update)

Major Changes:

  • Conda backend graduated from experimental status
  • New Dart and Flutter dependency providers added
  • Task sources now support exclusion patterns (! prefix and sources_exclude field)
  • Enhanced prerelease version detection (treats -nightly, -canary, -experimental, -insider, -edge as prereleases)

Breaking Changes:

  • None identified - This is a minor version update with backward compatibility maintained
  • One deprecation notice (does not affect this project): shorthands_file setting will show warnings starting in v2026.6.0 and be removed in v2026.12.0

Security & Bug Fixes:

  • Fixed backend prerelease detection and version resolution
  • Improved installation reliability (don't cache nonexistent paths, refresh latest before installing)
  • Fixed lockfile handling to prevent CLI override propagation
  • Windows PATH conversion fix for POSIX shells
  • Plugin detection improvements
  • GitHub attestation and API handling fixes

Registry Additions:

  • 9 new tools added to mise registry (neo4j, rustfs, codon, etc.)
  • ShellCheck enabled on Windows

🎯 Impact Scope Investigation

Usage Analysis:

  1. Dockerfile (Primary Impact)

    • Uses mise binary download: mise-v${MISE_VERSION}-linux-${ARCH}
    • Commands used: mise use -g <tool>@<version> and mise settings ruby.compile=false
    • Release v2026.5.0 is available and verified (HTTP 302 redirect to valid asset)

  2. GitHub Actions CI

    • Uses jdx/mise-action@v4.0.1 (pinned commit hash)
    • The GitHub Action is independent of the mise binary version used in Docker

  3. mise.toml Configuration

    • Defines tool versions for development (Go, Node, Ruby, Rust, Python, golangci-lint, lefthook, hadolint)
    • Uses standard tool specifications and aqua backend
    • No deprecated settings used (e.g., no shorthands_file)

Compatibility Check:

  • ✅ mise use -g command: Stable, no changes
  • ✅ mise settings command: Stable, no changes
  • ✅ Ruby compile=false setting: Still supported
  • ✅ Aqua backend: Enhanced but backward compatible
  • ✅ Binary download URL pattern: Unchanged

Dependency Impact:

  • No breaking changes in mise's interaction with managed tools (Node, Ruby, Go, Python, Rust)
  • The fix mentioned in project CHANGELOG (commit 4ebd58f: "update mise to v2026.4.11 to fix Python freethreaded build selection bug") is already included in v2026.4.11, and v2026.5.0 contains additional Python backend improvements

💡 Recommended Actions

Immediate Actions:

  1. ✅ Safe to merge - This PR can be merged without code modifications
  2. The update includes bug fixes and enhancements that improve reliability

Post-Merge Verification:

  1. Monitor Docker build success in CI/CD pipeline
  2. Verify all runtime installations complete successfully (Node, Ruby, Go, Python, Rust)
  3. Run E2E tests to confirm sandbox behavior remains stable

Optional Enhancements:

  • Consider testing the new prerelease handling if your project ever needs to use nightly/canary builds
  • The improved lockfile handling and installation caching fixes may improve build performance

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

@renovate renovate Bot force-pushed the renovate/jdx-mise-2026.x branch from 6e4dec5 to 17365d2 Compare May 10, 2026 21:27
@renovate renovate Bot changed the title fix(deps): update dependency jdx/mise to v2026.4.28 fix(deps): update dependency jdx/mise to v2026.5.0 May 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants