Skip to content

fix(github-release): update release jdx/mise ( v2026.4.19 ➔ v2026.4.20 )#317

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/mise
May 8, 2026
Merged

fix(github-release): update release jdx/mise ( v2026.4.19 ➔ v2026.4.20 )#317
renovate[bot] merged 1 commit into
mainfrom
renovate/mise

Conversation

@renovate

@renovate renovate Bot commented May 8, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Pending
jdx/mise patch 2026.4.192026.4.20 v2026.5.3 (+10)

Release Notes

jdx/mise (jdx/mise)

v2026.4.20: : Lockfile cleanup and path: fixes

Compare Source

A focused patch release that cleans up two long-standing lockfile and path-resolution bugs, makes GitHub attestation verification tolerant of regex-based aqua registry URLs, and reworks how the aqua registry is baked into mise.

Highlights

  • mise lock tool@latest now writes a concrete version and heals lockfiles already poisoned with version = "latest".
  • path: tool versions with relative paths resolve correctly against the config root.
  • Aqua registry is now baked from the upstream merged registry.yaml, pinned by tag.
  • GitHub artifact attestation works for registry entries that use regex URLs.

Fixed

  • (config) Relative path: tool versions are now resolved at parse time against the config's root directory (or CWD for CLI args), with ~/ expansion and leading ./ stripped. Previously, a value like path:./packages/logr was joined with installs_path at install time and produced a bogus directory such as ~/.local/share/mise/installs/logr/./packages/logr. (#​9320) by @​jdx

  • (lock) mise lock handling of @latest has been overhauled (#​9321 by @​jdx):

    • mise lock tool@latest now resolves latest to the newest installed version instead of writing the literal string "latest" into the lockfile.
    • mise lock no longer produces duplicate [[tools.<name>]] entries when the config uses tool = "latest".
    • Lockfiles already poisoned with version = "latest" are cleaned up in a single mise lock run.
  • GitHub artifact attestation verification now works when the aqua registry entry uses a regex in the workflow URL, unblocking installs such as aqua:updatecli/updatecli. (#​9327) by @​monotek

Changed

  • (aqua) The baked aqua registry source has been swapped for the upstream merged registry.yaml, pinned by tag via crates/aqua-registry/aqua-registry/metadata.json. The build script generates a canonical package-id map plus an alias lookup table, so runtime lookups only parse the selected package YAML. The pinned tag is now visible in mise doctor. (#​9043) by @​risu729

Added

Documentation

  • A dismissible announcement banner has been added to the docs site, driven by a remote JSON config. Link schemes are restricted to http/https, dismissals persist per-id in localStorage, and the banner height is kept in sync with --vp-layout-top-height via a ResizeObserver. The expires field is respected so banners automatically hide after a given date. (#​9326, #​9330, #​9334) by @​jdx

Aqua Registry

Updated aqua-registry from v4.492.0 to v4.498.0, which includes:

Sponsor mise

mise is built by @​jdx under en.dev — an independent studio making developer tooling (mise, aube, and more). Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at en.dev. Individual and company sponsorships keep mise fast, free, and independent.

Full Changelog: jdx/mise@v2026.4.19...v2026.4.20


Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • "every weekend,on Friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the merge: auto label May 8, 2026
@renovate renovate Bot requested a review from DevSecNinja as a code owner May 8, 2026 12:59
@renovate renovate Bot enabled auto-merge (squash) May 8, 2026 12:59
@renovate renovate Bot merged commit baea8c4 into main May 8, 2026
13 checks passed
@renovate renovate Bot deleted the renovate/mise branch May 8, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants