chore(deps): update dependency jdx/mise to v2026.7.12

[donbeave]

This PR contains the following updates:

Package	Type	Update	Change
jdx/mise		patch	2026.7.7 → 2026.7.12
jdx/mise	uses-with	patch	2026.7.7 → 2026.7.12

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

jdx/mise (jdx/mise)

v2026.7.12

Compare Source

🚀 Features

• (bootstrap) support relative paths in [bootstrap.repos] by @​lilienblum in #​11155
• (config) add MISE_SAFE mode to block repo-controlled code execution by @​jdx in #​11146
• (config) ignore project [env]/aliases/settings and skip trust in safe mode by @​jdx in #​11151
• (core) verify node/swift signatures in-process with rpgp, drop external gpg by @​jdx in #​11148
• (lock) add mise lock --bump to advance lockfile selectors by @​jdx in #​11145
• (npm) resolve versions over HTTP, groundwork for embedding aube by @​jdx in #​11147
• (npm) embed aube for node-free npm: version resolution and installs by @​jdx in #​11149
• (oci) built-in registry push client, drop skopeo/crane dependency by @​jdx in #​11132
• (oci) chunked uploads, retries, cross-repo mounts, progress bars by @​jdx in #​11141
• (oci) reuse unchanged tool layers from the previously pushed image by @​jdx in #​11142
• (oci) multi-arch image index support (--update-index) by @​jdx in #​11144

🐛 Bug Fixes

• (activate) avoid zsh/parameter autoload during zsh activation by @​jdx in #​11188
• (backend) detect qualified prerelease suffixes by @​risu729 in #​11179
• (brew) allow cask binaries to symlink into /usr/local on arm64 by @​jdx in #​11174
• (brew-cask) case-insensitive app lookup + preflight-generated wrappers by @​donbeave in #​11164
• (completions) avoid network lookup during usage completion by @​jdx in #​11169
• (config) align env and vars array parsing by @​risu729 in #​11060
• (config) avoid panic when config set descends into a non-table value by @​Marukome0743 in #​11153
• (config) honor trusted_config_paths over previously-ignored configs by @​JamBalaya56562 in #​11152
• (config) improve unsupported semver range warnings by @​risu729 in #​11176
• (env) resolve a real POSIX bash for _.source on Windows by @​JamBalaya56562 in #​11097
• (env) expand cross-file references in _.file env files by @​Marukome0743 in #​11158
• (hook-env) show concise warning instead of full error for untrusted configs by @​lilienblum in #​11159
• (http) don't cap remote-fetch commands to 3s under prefer_offline by @​jdx in #​11190
• (link) clear stale incomplete marker when linking a tool by @​Marukome0743 in #​11150
• (lock) preserve os-restricted tool entries by @​jdx in #​11175
• (shim) actionable error for unresolved Windows exe-shim dispatch by @​jdx in #​11189
• (vfox) preserve inner quotes with cmd.exe by @​finalchild in #​11166
• extend match of Linux musl asset for Android by @​bltavares in #​10730

📚 Documentation

• document environment-backed file-task arguments by @​zeitlinger in #​11165

🧪 Testing

• (nix) skip macos defaults test in sandbox by @​laozc in #​11170
• (oci) e2e happy-path push coverage against a real registry by @​jdx in #​11140

📦️ Dependency Updates

• update namespacelabs/nscloud-cache-action digest to c5f8dab by @​renovate[bot] in #​11079
• avoid tool installation during dry runs by @​risu729 in #​11016
• remove orphaned npm dependencies by @​risu729 in #​11100
• enforce experimental gate for task providers by @​risu729 in #​11177

📦 Registry

• disable cargo-release test by @​jdx in #​11143

Chore

• (ci) bump release linux runner to xlarge by @​jdx in #​11196
• (ci) increase release build timeouts by @​jdx in #​11200

New Contributors

• @​donbeave made their first contribution in #​11164
• @​lilienblum made their first contribution in #​11159

📦 Aqua Registry Updates

New Packages (5)

• abhinav/git-spice
• envoyproxy/gateway/egctl
• envoyproxy/gateway/envoy-gateway
• tedilabs/ota
• yvgude/lean-ctx

Updated Packages (2)

• supernovae-st/nika
• suzuki-shunsuke/tfcmt

v2026.7.11

Compare Source

🐛 Bug Fixes

• (bootstrap) support auto-updating cask metadata by @​casparbreloh in #​11107
• (bootstrap) resolve bare systemd timer unit names to dev.mise..service by @​jdx in #​11128
• (bootstrap) macos defaults bail if key or domain does not exist yet by @​roele in #​11118
• (config) reject conflicting tool selectors by @​risu729 in #​11069
• (http) make raw executables readable, not just executable by @​jdx in #​11135
• (java) prefer base vendor for latest command and ensure proper sorting by @​roele in #​11109
• (release) keep macos pgo instrumentation rust-only by @​jdx in #​11129
• (release) don't re-dispatch release workflow while one is active by @​jdx in #​11137
• (task) parse remote task file headers by @​Marukome0743 in #​11111
• (task) mark global config file tasks as global by @​risu729 in #​11106
• (task) report all task definition sources by @​risu729 in #​11098
• (watch) propagate --env to watched tasks by @​Marukome0743 in #​11114
• (windows) remove dangling runtime symlink pointer files on uninstall by @​JamBalaya56562 in #​11095

📚 Documentation

• (environments) clarify mise directory variables by @​jdx in #​11127
• fix dead VersionFox and MCP documentation links by @​Bartok9 in #​11117

⚡ Performance

• (activate) skip redundant initial fish prompt hook by @​jdx in #​11130
• (activate) skip redundant initial bash prompt hook by @​jdx in #​11131
• (activate) skip unchanged initial zsh prompt hook by @​jdx in #​11134
• (backend) run archive extraction via block_in_place by @​jdx in #​11136

📦️ Dependency Updates

• update actions/setup-node digest to 2499707 by @​renovate[bot] in #​11074
• update ghcr.io/jdx/mise:alpine docker digest to 60f8876 by @​renovate[bot] in #​11075
• update rust crate jiff to v0.2.32 by @​renovate[bot] in #​11086
• update ghcr.io/jdx/mise:deb docker digest to bdcdb1e by @​renovate[bot] in #​11076
• update ghcr.io/jdx/mise:rpm docker digest to d93ee51 by @​renovate[bot] in #​11077
• update rust crate ignore to v0.4.28 by @​renovate[bot] in #​11083
• update rust docker digest to 9a2cd30 by @​renovate[bot] in #​11080
• update jdx/mise-action digest to dad1bfd by @​renovate[bot] in #​11078
• update dependency prettier to v3.9.5 by @​renovate[bot] in #​11082
• update ghcr.io/jdx/mise:alpine docker digest to f024c27 by @​renovate[bot] in #​11085
• update ubuntu:26.04 docker digest to 3131b4c by @​renovate[bot] in #​11081
• update rust crate regex to v1.13.0 by @​renovate[bot] in #​11088
• update rust crate usage-lib to v3.5.5 by @​renovate[bot] in #​11087
• update rust crate x509-cert to 0.3 by @​risu729 in #​11102
• update rust crate mlua to 0.12 by @​risu729 in #​11099
• update dependency typescript to v7 by @​renovate[bot] in #​11093
• update rust crate sigstore-verify to 0.11.0 by @​renovate[bot] in #​11091
• update rattler by @​renovate[bot] in #​11089
• lock file maintenance by @​renovate[bot] in #​11120

📦 Registry

• allow nub postinstall by @​risu729 in #​11126

Chore

• (nix) remove unused inputs by @​risu729 in #​11104
• (release) stop cutting vfox tags on embedded-plugin churn by @​jdx in #​11133
• (vfox) remove unused development tools by @​risu729 in #​11105

New Contributors

• @​Bartok9 made their first contribution in #​11117
• @​LukasKnuth made their first contribution in #​11110

📦 Aqua Registry Updates

New Packages (2)

• kbrdn1/gwm-cli
• planetscale/ghcommit

Updated Packages (3)

• anthropics/claude-code
• skaji/relocatable-perl
• suzuki-shunsuke/tfrstate

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[donbeave]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.