mise upgrade for granted resolves 0.39.0, but the Common Fate release URL returns 404

[garysassano]

Hi, I ran into an issue upgrading granted through mise, and it looks like there may be a mismatch between the published GitHub release assets and the releases.commonfate.io URL that mise/aqua is trying to download.

Environment

• mise --version: 2026.3.17 linux-x64 (2026-03-27)
• OS/arch: x86_64 Linux
• Config:

granted = "latest"

What happens

Running:

mise upgrade

fails with:

granted@0.39.0                      download granted_0.39.0_linux_x86_64.tar.gz
mise ERROR Failed to install aqua:common-fate/granted@latest: HTTP status client error (404 Not Found) for url (https://releases.commonfate.io/granted/v0.39.0/granted_0.39.0_linux_x86_64.tar.gz)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

What I verified

The exact URL mise tries to download returns 404:

curl -I https://releases.commonfate.io/granted/v0.39.0/granted_0.39.0_linux_x86_64.tar.gz

Response:

HTTP/2 404
content-type: application/xml
server: AmazonS3
x-cache: Error from cloudfront

For comparison, the previous release artifact is available:

curl -I https://releases.commonfate.io/granted/v0.38.0/granted_0.38.0_linux_x86_64.tar.gz

Response:

HTTP/2 200
content-type: application/x-gzip

At the same time, the GitHub v0.39.0 release page does appear to contain the Linux tarball asset:

• granted_0.39.0_linux_x86_64.tar.gz

So this looks like one of:

1. the GitHub release exists but releases.commonfate.io has not synced the asset yet,
2. the release mirror path is wrong for v0.39.0,
3. the mise/aqua metadata is pointing at the wrong distribution URL template.

Question

Is v0.39.0 expected to be installable from releases.commonfate.io yet?

If yes, could someone check why this specific asset URL returns 404 even though the asset appears on the GitHub release?

If no, what is the supported installation source for mise/aqua users for v0.39.0?

Temporary workaround

Pinning to 0.38.0 still works, since the corresponding release URL returns 200.

[chrnorm]

New releases of Granted are being published at releases.granted.dev. See the release infrastructure changes section here: https://github.com/fwdcloudsec/granted/releases/tag/v0.39.0. Sorry for any pain this has caused.

We don’t maintain the mise or aqua packages - could you please raise an issue or make a pull request on those projects to request an update? If you can link back any relevant issues or PRs to this discussion that would be great, in case other Granted users hit the same issue.

[garysassano]

Thanks for pointing that out. I'll open a PR on aquaproj/aqua-registry to fix this.

[garysassano]

@chrnorm Is there a reason for not making all past releases available under the new granted.dev domain?