Setting to disable sending auth headers when host is replaced with url_replacements

[horgh]

I'm wondering whether a setting to do this would make sense. My use case is I have an internal Artifactory instance that I set up like this in mise.toml:

[settings.url_replacements]
# Route GitHub downloads through Artifactory cache
"https://github.com/" = "https://artifactory.maxmind.com/artifactory/github-proxy/"

I also run mise through Renovate to update tools. It runs both mise install and mise lock. I set MISE_GITHUB_TOKEN when running Renovate to a GitHub token so that I do not get ratelimited by GitHub when Renovate runs mise lock.

However that token being set causes mise to send it to Artifactory due to the URL replacement and I get an HTTP 401 error when running mise install:

mise ERROR Failed to install aqua:protocolbuffers/protobuf/protoc@34.0: HTTP status client error (401 ) for url (https://artifactory.maxmind.com/artifactory/github-proxy/protocolbuffers/protobuf/releases/download/v34.0/protoc-34.0-linux-x86_64.zip)

One thing I considered was not running mise install during my Renovate run. However I need tools available in some cases (such as to regenerate protobuf files).

I considered whether netrc could be used, but it seems like I can only use that to set different credentials. It can't be used to express anonymous access, which is what my Artifactory instance otherwise uses.

Thank you!

[risu729]

mise shouldn't add the Authorization header for github.com. I fixed it in #9271, released in 2026.4.19, so I think this is fixed now.

[horgh]

Thank you!