v2026.6.12: Bootstrap skip, cross-platform lock checksums, DNF5 fix

Added

• bootstrap: mise bootstrap --skip <part> for selective phases (packages, dotfiles, defaults, launchd, systemd, user, tools, task, final-hook); repeatable and comma-separated (#10497 by @jdx).
• http: Cross-platform lock checksums resolved from published metadata via checksum_url, checksum_expr, and checksum_algo (#10509 by @itochan).
• aqua: Parse and verify checksum.replacements, checksum.minisign, and checksum.github_artifact_attestations (#10473 by @risu729).
• registry: Added aspire (#10520 by @davidfowl), ldc (#10527 by @slbls), and nub (#10544 by @colinhacks).

Fixed

• upgrade: Correctly remove the previously installed version during mise up when minimum_release_age is in effect (#10466 by @roele).
• install: Rebuild runtime symlinks and shims for tools that succeeded in a partially failed mise install (#10470 by @risu729).
• bootstrap: Detect systemd user manager via $XDG_RUNTIME_DIR/systemd/private, not only a session D-Bus, so headless systems are recognized (#10550 by @jdx).
• vfox: Resolve tools = true env path templates like {{ tools.python.path }} against the fully-resolved dependency toolset; values now reach vfox install hooks and tool-level postinstall (#10481 by @JamBalaya56562).
• task: Higher-precedence TOML wins when the same task is defined in multiple config files in one project (#10471 by @risu729).
• task: Skip mise config TOMLs (e.g. mise.toml, .mise/config.toml) when walking directory task includes like includes = ["."] (#10500 by @jdx).
• task: Return a clean error (and avoid panicking the scheduler) when the resolved inline/file shell is empty; spawned task panics now exit non-zero (#10517 by @jdx).
• task: Honor task.show_full_cmd / MISE_TASK_SHOW_CMD_NO_TRUNC in the [task] $ ... header (#10518 by @JamBalaya56562).
• env: Treat $$ as a literal $ during env_shell_expand (#10511 by @jdx).
• npm: Warn when system pnpm/bun may not support minimum_release_age flags (#10491 by @risu729).
• pipx: Run pipx upgrade-shared before fallback installs that forward minimum_release_age to pip (#10472 by @risu729).
• pipx: Warn when uv tool install is below 0.2.22 for --exclude-newer (#10510 by @risu729).
• pipx: Force PIPX_DEFAULT_BACKEND=pip on mise pipx subprocesses so pip flags are not forwarded to pipx's uv backend (#10513 by @risu729).
• backend: Centralize dependency executable resolution and apply windows_executable_extensions consistently across uv, aube, cargo-binstall, and sops (#10514 by @risu729).
• system: Drop the bare -- from dnf install/upgrade argv, which DNF5 (Fedora 41+, RHEL/CentOS Stream 9+) rejects (#10538 by @spencergilbert).

Documentation

• dotfiles: Self-managing config examples source from the real clone path so first-run bootstrap works before the ~/.dotfiles symlink exists (#10494 by @jdx).
• Recommend keeping mise current (#10505) and clean up emoji checkboxes in env docs (#10504).

Changed

• Bump usage to 3.5.2 (#10498).

💚 Sponsor mise

mise is built by @jdx under en.dev — an independent studio making developer tooling (mise, aube, and more). Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at en.dev. Individual and company sponsorships keep mise fast, free, and independent.