chore(deps): update dependency mise to v2026.1.4

[renovate]

This PR contains the following updates:

Package	Update	Change
mise	patch	v2026.1.1 → v2026.1.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

jdx/mise (mise)

v2026.1.4

Compare Source

This release brings significant improvements to dependency management, task execution, and backend flexibility, with a focus on reproducibility and performance.

The Conda backend now supports dependency locking for reproducible installations, ensuring your environments remain consistent across machines and time. The HTTP backend has been enhanced with JSON filtering and Tera templating for more flexible version extraction from web sources. Task execution sees improvements in monorepo support and performance, while several bug fixes address deadlocks and path resolution issues.

Highlights

Reproducible Conda Environments - The Conda backend now supports dependency locking (#​7708), allowing you to freeze exact package versions for reproducible installations. This ensures your conda environments remain identical across different machines and over time, crucial for scientific computing and data analysis workflows.

Enhanced HTTP Backend - The HTTP backend gains powerful new features for version extraction (#​7707, #​7723). You can now use JSON filter syntax to extract versions from complex API responses, and Tera templating provides flexible string manipulation. This makes it easier to integrate tools that don't follow standard versioning patterns.

Better Monorepo Task Support - Task execution in monorepos is now more flexible with explicit config root listing via [monorepo].config_roots (#​7705). Task dependencies can now use environment variables (#​7724), and path resolution for dependencies works correctly across monorepo boundaries (#​7698, #​7699).

Bug Fixes

• Fixed a deadlock that could occur when using venv/go backends during environment resolution (@​stk0vrfl0w in #​7696)
• Resolved hardcoded library paths in conda packages that prevented proper relocation (#​7713)
• Tool stubs are now properly exempted from lockfile requirements (#​7729)
• Python's ls-remote command now correctly sorts CPython versions at the end of the output (#​7721)
• Remote task files are now resolved before display and validation commands (@​yannrouillard in #​7681)

Performance

Task listing performance has been restored to previous levels by fixing a caching regression (#​7716). Users with many tasks should notice significantly faster mise tasks commands.

Registry Updates

Several tools have been migrated to more reliable backends:

• Dotnet, Lua, Redis, and Postgres now use vfox backends by default for better cross-platform support
• Kotlin and Crystal moved to GitHub backends for direct releases
• SQLite and Make now use the conda backend
• Meson uses pipx for Python-based installation
• Added Smithy support via aqua backend (#​7661)

Low-usage ASDF plugins have been removed to streamline the registry (#​7701).

New Contributors

Welcome to @​yannrouillard and @​stk0vrfl0w who made their first contributions to mise!

v2026.1.3

Compare Source

This release introduces several powerful new features for mise, including private artifact storage via S3, enhanced upgrade controls, and improved hook management. We've also fixed important bugs affecting npm dependencies, GitHub authentication, and task inheritance in monorepos.

Highlights

S3 Backend Support - You can now use Amazon S3 for private artifact storage, enabling secure distribution of internal tools and binaries. This is particularly useful for enterprise environments that need to host proprietary tools. See the S3 backend documentation for setup instructions. (@​jdx, #​7668)

Enhanced Upgrade Command - The mise upgrade command now includes an --exclude flag to skip specific tools during bulk upgrades, and benefits from improved tab completion that shows only installed tools. This gives you more control when updating your development environment. Learn more in the upgrade command documentation. (@​jdx, #​7669, #​7670)

Hook and Environment Control - New --no-hooks and --no-env flags provide fine-grained control over mise's behavior, allowing you to skip hooks or environment variable loading when needed. This is helpful for debugging or when you need to run mise in isolation. (@​aacebedo, #​7560)

Bug Fixes

• npm circular dependencies - Fixed an issue where mise could get stuck in a loop when npm itself was listed as a dependency (@​AprilNEA, #​7644)
• GitHub authentication - Improved token handling to properly fall back to GITHUB_TOKEN when accessing github.com, resolving authentication issues for private repositories (@​subdigital, #​7667, #​7673)
• Task inheritance - Tasks defined in parent directories are now properly inherited in monorepo setups, making it easier to share common tasks across projects (@​chadxz, #​7643)
• vfox backend upgrades - Fixed upgrading tools that use symlinked installations in the vfox backend (@​TyceHerrman, #​7012)
• Architecture validation - mise now properly rejects tool downloads when the architecture doesn't match your system, preventing installation of incompatible binaries (@​jdx, #​7672)
• Self-update efficiency - The self-update command now skips unnecessary operations when you're already on the latest version (@​jdx, #​7666)

Registry Updates

Added support for new tools:

• oh-my-posh - The popular cross-shell prompt theme engine (@​scop, #​7659)
• bibtex-tidy - A BibTeX file formatter and cleaner (@​3w36zj6, #​7677)

Also fixed the kscript configuration by removing an incorrect bin_path option (@​risu729, #​7693).

New Contributors

Welcome to @​AprilNEA, @​opswole, @​subdigital, and @​aacebedo who made their first contributions to mise!

v2026.1.2

Compare Source

mise v2026.1.2 includes several important bug fixes and security improvements, particularly addressing version management edge cases and enhancing the tool's reliability across different scenarios.

This release also strengthens our GitHub workflow security to prevent potential code execution from untrusted sources, ensuring the safety of our development process and community contributions.

Bug Fixes

Version Management Improvements

• Fixed an issue where pre-release versions were incorrectly included when using latest with install_before (#​7631) - thanks to @​koh-sh
• Enhanced version filtering to properly exclude test versions (e.g., 1.0.0-test) from stable version lists (#​7647) - thanks to @​belgio99
• Resolved a year-boundary bug that caused mise self-update to fail when crossing into a new year (#​7611)

Backend and Asset Detection

• Added support for .artifactbundle.zip files in asset selection, improving compatibility with certain tool distributions (#​7657) - thanks to @​swizzlr
• Fixed HTTP backend to properly fallback to configuration when fetching tool options (#​7655) - thanks to @​roele

Task System

• Corrected tool inheritance behavior in tasks when using intermediate parent configurations (#​7637) - thanks to @​chadxz

Security

• Implemented safeguards in our GitHub workflows to prevent potential code execution from untrusted forks, enhancing the security of our development process

New Tools

• Added support for oha, a modern HTTP load testing tool (#​7633) - thanks to @​jylenhof

New Contributors

Welcome to our first-time contributors!

• @​swizzlr, @​belgio99, @​gmalinowski, @​chadxz, @​shina1024, @​jonathanagustin, and @​turbocrime

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.