Added
- (aqua) Support multiple custom registries via
aqua.registries; deprecates single-stringaqua.registry_url(#10179 by @risu729). - (env) Decrypt SOPS-encrypted TOML env files (
.env.toml) throughrops(#10201 by @risu729). - (hooks) Add
run_windowsfor Windows-specific inline hook commands (#10202 by @risu729). - (task) Render
task_config.includeswith the Tera config context and expand~/for local includes (#10225 by @risu729). - (task) Support standalone
.tomltask files viagit::directory includes (#10219 by @davidolrik). - (aqua) Extract
7zarchives, including auto-detection of.7zassets (#10224 by @risu729).
Fixed
- (env) Include the uv venv (
uv.lock+.venv) in theenv_cachekey soVIRTUAL_ENVno longer leaks across sibling directories whenenv_cache=trueandpython.uv_venv_autois set (#10217 by @Nagato-Yuzuru). - (task) Resolve dependency
sourcesrelative to each task's directory and pass per-dependency--watchpaths to watchexec (#10054 by @43081j). - (ruby) Include resolved Ruby install options (compile mode, installer, build repo, precompiled URL, patch inputs) in lock identity (#9992 by @risu729).
- (elixir) Resolve lockfile URL and SHA-256 from
builds.hex.pmmetadata; locked installs reuse the lockfile URL (#10226 by @risu729). - (github) Accept GitHub-canonicalized owner/repo casing when validating
mise-versionsrelease asset URLs (#10240 by @risu729). - (github) Detect 401 responses on cached native OAuth tokens, refresh once, and retry transparently (#10246 by @jdx).
- (github) Warn when
mise-versionsGitHub metadata lookups hit rate limits or non-404 errors (#10254 by @jdx). - (github) Skip the versions host for non-registry
github:tools (#10255 by @jdx). - (github) Emit logfmt-style structured fields for versions-host calls, with credentials and query stripped from URLs (#10256 by @jdx).
- Nix flake build test failure by adding
gittonativeCheckInputs(#10243 by @okuuva).
Security
- (http) Sanitize HTTP backend version names in install symlink paths to prevent repository-controlled versions from escaping the installs directory (GHSA-f94h-j2qg-fxw3) (#10245 by @jdx).
Documentation
Registry
- Prefer
aqua:endevco/aubeforaubeso glibc/musl libc variants are picked up automatically (#10171 by @jdx). - Add
pgroll(#10252 by @diegoholiveira). - Add
cargo-release(#10258 by @jdx).
💚 Sponsor mise
mise is built by @jdx under en.dev — an independent studio making developer tooling (mise, aube, and more). Development is funded by sponsors.
If mise saves you or your team time, please consider sponsoring at en.dev. Individual and company sponsorships keep mise fast, free, and independent.