ci: Bump Base Space

[weebo-update-cli]

Upgrade BaseSpace

Bump mise version

change detected: * key "$.base_tools.mise" updated from "v2026.9.12" to "v2026.9.13", in file "versions.yaml"

v2026.9.13

`mise run` can now export OpenTelemetry traces and logs (experimental), and experimental daemon providers let several projects and worktrees share one PostgreSQL, CockroachDB, or NATS server, each with its own database or account. Lockfiles no longer switch backends on their own when the registry moves a tool: the new `mise backends switch` command does it when you ask. `[dotfiles]` and `[bootstrap.files]` can now remove files and manage permissions, and `mise bootstrap unapply` removes what a module set up. The experimental `pkgx:` backend has been removed.

## Highlights
- **Observability and shared services (experimental):** task runs export OTLP traces and, if you opt in, task output as logs. Global `[daemon_providers]` run long-lived servers, and projects attach to them with an isolated database or NATS account per checkout.
- **Safer lockfiles:** locked tools stay on their locked backend, `mise lock --bump` checks remote versions and fails when it can't, lockfiles no longer record versions that were never confirmed, and tool stubs lock into the project's `mise.lock`.
- **Declarative cleanup:** `mode = "absent"`, `remove_empty` templates, permissions-only entries, removal of empty directories mise created, and `mise bootstrap unapply` let a config describe what should *not* be on a machine.

## Added

### Tasks
- **OpenTelemetry export for `mise run` (experimental).** Each run becomes one trace, with a span per task (grouped by monorepo package) that carries its exit code and redacted args. W3C `TRACEPARENT` is read from the environment and passed to each task, so nested `mise run` calls and instrumented tools appear in the same trace. Nothing is exported unless `otel.enabled = true` **and** an OTLP endpoint is set. Offline mode disables export, and each export times out after 3s by default. A separate `otel.logs = true` setting exports task stdout (INFO) and stderr (WARN) as log records linked to their spans, with redactions applied first. With `otel.logs` on, tasks in `interleave`/`quiet` modes no longer get a TTY; use `--raw` for tasks that need one. [#13557](https://github.com/jdx/mise/pull/13557), [#13558](https://github.com/jdx/mise/pull/13558), [#13559](https://github.com/jdx/mise/pull/13559) (built on work by @MatthiasGrandl and @zeitlinger)

  ```toml
  [settings]
  otel.enabled = true
  otel.logs = true   # optional; exports task output too
  ```
  ```sh
  export OTEL_EXPORTER_OTLP_ENDPOINT=<your OTLP/HTTP collector URL>
  mise run build ::: test
  ```

### Daemons (experimental)
- **Shared server providers.** Declare long-lived PostgreSQL, CockroachDB, or NATS servers in global config under `[daemon_providers]` and manage them with `mise daemons providers ls|start|stop|restart`. Providers have their own tools, ports, and persistent data. They run in an isolated environment and are not tied to any checkout. [#13534](https://github.com/jdx/mise/pull/13534)
- **Per-checkout databases and accounts on a shared server.** A project daemon with `provider = "..."` gets its own database (PostgreSQL/CockroachDB) or its own NATS account with separate subjects and JetStream data. Each checkout path gets a stable name, so worktrees share the server but not the data. Give several daemons the same `resource` name to share data on purpose. Connection env vars point at the right database, and NATS gets an authenticated `NATS_URL`. [#13536](https://github.com/jdx/mise/pull/13536), [#13537](https://github.com/jdx/mise/pull/13537)

  ```toml
  # ~/.config/mise/config.toml
  [daemon_providers.local-postgres]
  preset = "postgres"
  version = "18"
  port = "auto"

  # project mise.toml
  [daemons.db]
  provider = "local-postgres"
  # resource = "shared_app"   # opt in to sharing data
  ```

### Lockfiles and backends
- **`mise backends switch`.** When the registry moves a tool to a new backend (as happened with hk and communique moving to `packslip:`), a tool locked to the old backend now stays there. `mise install` and `mise lock` print a warning that points to the new command, which moves lock entries to the registry's backend at the same versions, relocks their platforms, and reinstalls. It supports `--dry-run`, `--global`, and `TOOL@VERSION`. If any relock fails, every lockfile it changed is restored. [#13543](https://github.com/jdx/mise/pull/13543)
- **Tool stubs lock into the project's `mise.lock`.** `mise generate tool-stub --lock` now records the stub in the nearest project lockfile (listed under `tool-stubs`), so installs verify the recorded checksums and `--locked`/`MISE_LOCKED=1` accept stubs. Previously the `[lock]` section written into the stub was never used, so checksums were never checked. [#13502](https://github.com/jdx/mise/pull/13502)
- **Install from a local archive.** The `http:` backend accepts `file://` URLs. It copies the archive instead of downloading it, still verifies `checksum`, and works offline. [#13574](https://github.com/jdx/mise/pull/13574)

  ```toml
  [tools]
  "http:my-tool" = { version = "1.0.0", url = "file:///opt/archives/my-tool-v1.0.0-linux-x64.tar.gz", checksum = "sha256:..." }
  ```
- **Checksum mismatch hints for re-uploaded GitHub assets.** When a `github:` or `aqua:` install fails a checksum check, mise asks GitHub for the asset's current digest. If that digest matches the download, the error says the maintainer probably re-uploaded the asset. The install still fails. [#13512](https://github.com/jdx/mise/pull/13512)
- **vfox `BackendUninstall` hook.** Backend plugins can define `hooks/backend_uninstall.lua` to clean up outside the install directory. It runs before removal on uninstall, upgrade, and prune. If the hook errors, the install directory is kept. [#13522](https://github.com/jdx/mise/pull/13522)

### CLI
- **`mise search` checks package registries.** Add a prefix to search npm, crates.io, RubyGems, or NuGet (`mise search npm:typescript-language`, `cargo:`, `gem:`, `dotnet:`). `--all` searches every source at once. Plain searches and shell completion still make no registry requests, and `MISE_OFFLINE=1` skips them. [#13550](https://github.com/jdx/mise/pull/13550)
- **`mise ls` by backend.** `-b/--backend` (repeatable) filters by backend and also works with `--json`. `--grouped` prints one section per backend. [#13530](https://github.com/jdx/mise/pull/13530)
- **Key completion for `mise config get`/`set`.** Tab completes dotted keys, with descriptions, from the schema and from the target file. `--file`, `--global`, and `--system` are respected. [#13551](https://github.com/jdx/mise/pull/13551)
- **Coloured help and a logo.** `mise --help` is now coloured on terminals (and respects `NO_COLOR`), wraps at the terminal's real width, and shows the mise logo on `mise`/`mise --help` when there's room. [#13449](https://github.com/jdx/mise/pull/13449)
- **Project URLs in the registry.** Registry entries can set a `url`, which appears in `mise tool` (and `mise tool <name> --url`) and in `mise registry --json`. [#13533](https://github.com/jdx/mise/pull/13533)

### Configuration and hooks
- **`.miserc.local.toml`.** Sets per-checkout early config, such as `env = ["native"]`, without editing the shared `.miserc.toml`. At each directory level it is read before `.miserc.toml`. CLI flags and `MISE_ENV` still take precedence. [#13440](https://github.com/jdx/mise/pull/13440)
- **`backend` and `install_path` in `MISE_INSTALLED_TOOLS`.** Postinstall hooks can now see where each tool came from and exactly where it was installed. [#13421](https://github.com/jdx/mise/pull/13421) (@garysassano)
- **A configured pnpm overrides Node's bundled pnpm**, whichever order the tools are listed in. [#13498](https://github.com/jdx/mise/pull/13498) (@EMcCormack)

### Dotfiles
- **Choose what a tracked directory saves.** `exclude` and `include` lists on `mode = "track"` entries. Exclusions always win. `include = []` selects nothing. Narrowing a list does not delete the files on other machines. [#13418](https://github.com/jdx/mise/pull/13418), [#13432](https://github.com/jdx/mise/pull/13432)

  ```toml
  [dotfiles]
  "~/.codex" = { mode = "track", include = ["config.toml", "rules/**"], exclude = ["*.log"] }
  ```
- **Preview before tracking.** `mise dot track --dry-run` and `mise dot paths --preview` show file counts, sizes, exclusions, and skipped nested repositories. Large trees get a warning. [#13417](https://github.com/jdx/mise/pull/13417)
- **`mode = "absent"`** removes a file or symlink at the target, with support for OS `variants`. Directories and special files are refused, even with `--force`. [#13513](https://github.com/jdx/mise/pull/13513)
- **`permissions` key.** Overrides the mode of copy, template, and content entries, or manages only the permissions of an existing file such as `~/.ssh/config`. Status, diff, and apply report and fix drift. The key is ignored on Windows. [#13514](https://github.com/jdx/mise/pull/13514)
- **`remove_empty = true` on templates** removes the target when the template renders empty. A file you have edited since mise last wrote it is kept unless you pass `--force`. [#13515](https://github.com/jdx/mise/pull/13515)
- **Empty parent directories mise created** are removed along with their target on apply and unapply. This only applies inside `$HOME` and never to directories that already existed. [#13518](https://github.com/jdx/mise/pull/13518)
- **Warnings from background captures**, such as credential-named files saved in plaintext, are now shown by the next `mise dot` command or `mise bootstrap`. Previously they only went to the watcher logs. [#13483](https://github.com/jdx/mise/pull/13483)

### Bootstrap
- **`mise bootstrap unapply <ENV>...`** removes the files, directories, user services, and dotfile entries a module added after you deselect it. Anything another environment still declares is kept. Supports `--dry-run` and `--force`. [#13441](https://github.com/jdx/mise/pull/13441)
- **Permissions-only `[bootstrap.files]` entries.** Declare only `mode`/`owner`/`group` to manage a file's metadata without taking over its contents. [#13511](https://github.com/jdx/mise/pull/13511)
- **`remove_empty = true`** on templated `[bootstrap.files]` removes the target when the template renders empty. [#13510](https://github.com/jdx/mise/pull/13510)
- **More systemd directives:** `before`, `binds_to`, `part_of`, `conflicts`, `exec_start_pre`, `exec_start_post`, and `exec_stop_post`. `~` now expands after exec prefixes such as `-~/bin/check`. [#13526](https://github.com/jdx/mise/pull/13526)

### Registry
- Added `mole` ([#13363](https://github.com/jdx/mise/pull/13363), @casparbreloh), `reviewdog` ([#13562](https://github.com/jdx/mise/pull/13562), @takumin), and `nim` ([#13461](https://github.com/jdx/mise/pull/13461), @elijahr). `aube` now points at `aubepkg/aube` ([#13541](https://github.com/jdx/mise/pull/13541)).

## Fixed

### Tools, installs, and lockfiles
- `mise cache prune` could delete files from installed tools: it followed symlinks out of the cache into install directories and left npm cache entries half-empty. It now never follows symlinks and removes stale entries as a whole. `cache_prune_age = "0s"` now also turns off `mise cache prune`. [#13424](https://github.com/jdx/mise/pull/13424)
- `mise lock --bump` now checks remote versions for every selector (for example `"6"`, not only `latest`) and fails when the version list can't be fetched, where it used to exit 0 with stale versions. Packslip registry tools no longer call `api.github.com` in normal use, which avoids rate-limit errors. [#13544](https://github.com/jdx/mise/pull/13544)
- `mise lock` refuses to record an aqua version that only resolved to its own request string because the version list failed to load. When such an install fails, the error now says why. [#13552](https://github.com/jdx/mise/pull/13552)
- `mise lock --global` no longer skips global tools that the project config shadows, and no longer overwrites a global pin with the project's version. [#13547](https://github.com/jdx/mise/pull/13547)
- `mise lock` no longer tries to lock `3.9.6~aube~<digest>`-style install directory names for npm and pipx tools. [#13542](https://github.com/jdx/mise/pull/13542)
- `mise upgrade --bump tool@selector` now saves the selector to the config, as `mise use` does. [#13179](https://github.com/jdx/mise/pull/13179) (@zeitlinger)
- npm packages whose lifecycle scripts call back into the package manager through `npm_execpath` (such as `re2`) now run through aube, not mise's task runner. [#13484](https://github.com/jdx/mise/pull/13484)
- Command wrappers such as `[wrappers.cargo] command = "mbx"` now install the missing provider tool before running it. [#13532](https://github.com/jdx/mise/pull/13532)
- A GitHub, GitLab, or Forgejo token containing a newline or other invalid header character now gives a redacted error, where mise used to crash. Tokens read from `*_tokens.toml` are trimmed. [#13488](https://github.com/jdx/mise/pull/13488)
- `.tar.zst` archives compressed with a long window now extract. [#13566](https://github.com/jdx/mise/pull/13566)
- aqua creates `.mise-bins` for registry files listed by name only ([#13525](https://github.com/jdx/mise/pull/13525)), and reports only the provenance and signature checks mise actually performs ([#13549](https://github.com/jdx/mise/pull/13549)).
- Renaming a raw Windows download with `bin` keeps the `.exe` extension. [#13529](https://github.com/jdx/mise/pull/13529)
- `brew-cask` percent-decodes artifact filenames taken from cask URLs. [#13431](https://github.com/jdx/mise/pull/13431)
- `mise self-update` fails before downloading when it can't write to the install directory. [#13453](https://github.com/jdx/mise/pull/13453)
- Per-tool progress bars line up in interactive installs. [#13494](https://github.com/jdx/mise/pull/13494)

### Tasks
- A metadata-only `[tasks.hello]` block no longer creates an empty task that hides `mise-tasks/hello.sh`. It now configures the script, and dependency groups keep their `depends` when another config layer adds metadata. [#13448](https://github.com/jdx/mise/pull/13448)
- A `run` under a file task's name now replaces the script. [#13458](https://github.com/jdx/mise/pull/13458) (see Breaking Changes)
- Dependencies that use optional usage flags or args in templates are no longer dropped when those values are omitted. [#13569](https://github.com/jdx/mise/pull/13569) (@nettlesh)
- When parallel tasks fail together, only the task that caused the stop prints its error chain. [#13556](https://github.com/jdx/mise/pull/13556)

### Shell, CLI, and platforms
- The bash `mise` function now embeds the path to the mise binary, so it keeps working in shells that copied the function but not `$__MISE_EXE` (for example Claude Code's Bash tool on Windows). [#13491](https://github.com/jdx/mise/pull/13491)
- Windows release builds no longer abort with "panic in a function that cannot unwind" when a vfox plugin hits a Lua error. [#13503](https://github.com/jdx/mise/pull/13503)
- `cargo install mise` for Windows targets works again. [#13573](https://github.com/jdx/mise/pull/13573)
- Help and completion output exit quietly when the reader closes the pipe. [#13575](https://github.com/jdx/mise/pull/13575), [#13527](https://github.com/jdx/mise/pull/13527)

### Dotfiles, history, and bootstrap
- On Windows, user services that set `environment` no longer run through `cmd.exe` behind a console window that killed the service when closed, and shell metacharacters in the environment are no longer rejected. The history watcher also runs without a console window. [#13429](https://github.com/jdx/mise/pull/13429), [#13428](https://github.com/jdx/mise/pull/13428)
- `mise bootstrap` now runs `[history.reload]` commands after its dotfiles phase writes matching files, as `mise dot apply` does. [#13509](https://github.com/jdx/mise/pull/13509)
- Nested Git repositories inside tracked directories are skipped and reported, not saved as commit pointers. Track the repository's root directly to capture its files. [#13416](https://github.com/jdx/mise/pull/13416)
- Global history exclusions apply consistently to tracked paths ([#13427](https://github.com/jdx/mise/pull/13427)), and files left out by credential filtering are reported ([#13415](https://github.com/jdx/mise/pull/13415)).
- A postgres daemon that would start as root now fails early with a clear error. [#13567](https://github.com/jdx/mise/pull/13567)

## Security
- When `[bootstrap.files]` and `[bootstrap.directories]` changes run as root, mise no longer follows a symlink in the path that another user could have planted (CWE-59). Status and dry-run show these paths as `unknown`, and apply refuses them. Symlinks inside root-owned directories that no one else can write, such as `/etc` on macOS, still work. [#13539](https://github.com/jdx/mise/pull/13539), [#13546](https://github.com/jdx/mise/pull/13546)

## Breaking Changes
- **The experimental `pkgx:` backend is removed.** Entries like `"pkgx:stedolan.github.io/jq"` no longer resolve; switch to the registry shorthand (`jq`) or `aqua:`/`github:`. Lockfiles with pkgx sections still load, and those sections are dropped the next time mise writes the file. The `pkgx` registry entry for the pkgx CLI itself is unchanged. [#13555](https://github.com/jdx/mise/pull/13555)
- **Locked tools keep their locked backend.** A short-name tool no longer follows the registry to a new backend if `mise.lock` records a different one. Run `mise backends switch` to move it. [#13543](https://github.com/jdx/mise/pull/13543)
- **TOML commands replace file tasks.** `[tasks."hello.sh"] run = ...` used to be ignored and now runs. `[tasks.hello] run = ...` no longer leaves `hello.sh` available as a separate task. To keep both, give the inline command its own name. [#13458](https://github.com/jdx/mise/pull/13458)
- **`mise generate tool-stub --lock` needs a project config above the stub.** It writes to that project's `mise.lock` and no longer pins the stub's `version`. Any old `[lock]` section is ignored and removed. Older mise releases drop `tool-stubs` from `mise.lock`. [#13502](https://github.com/jdx/mise/pull/13502)
- **Dotfiles `include`/`exclude` need current mise on every machine.** Upgrade every machine that shares the dotfiles setup before using `include` lists. New checkpoints use schema version 2, which older clients can't roll back. [#13432](https://github.com/jdx/mise/pull/13432)
- **Recursive `[bootstrap.directories]` removals** always run as root, so a path that crosses a symlink in a user-writable directory is now refused, even under `$HOME`. Declare the resolved path instead. [#13546](https://github.com/jdx/mise/pull/13546)

## New Contributors
* @EMcCormack made their first contribution in [#13498](https://github.com/jdx/mise/pull/13498)
* @elijahr made their first contribution in [#13461](https://github.com/jdx/mise/pull/13461)
* @takumin made their first contribution in [#13562](https://github.com/jdx/mise/pull/13562)

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.9.12...v2026.9.13

## 💚 Sponsor mise

mise is built and maintained by [@jdx](https://github.com/jdx), an open source developer at [**entire.io**](https://entire.io/), the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an [individual or company sponsor](https://jdx.dev/sponsors.html). Your support funds ongoing development and helps keep mise fast, free, and independent.

v2026.9.12

The experimental `[daemons]` system grows substantially: tasks can declare the daemons they need, `[daemon_groups]` selects subsets of a project's services, `port = "auto"` and stable `<NAME>_URL` hostnames let several git worktrees run the same stack side by side, and CockroachDB, NATS, and SpiceDB join the PostgreSQL and Redis presets. Outside daemons, `[bootstrap.packages]` gains `scoop:` and `zypper:` managers, `mise install --system` elevates with sudo only for the final publish step, official mise images are published to GHCR and Docker Hub, and a run of `brew-cask` fixes lets many more casks install unattended.

## Highlights
- **Daemons as part of the task graph (experimental):** `[tasks.x] daemons = [...]` starts and waits for services before a task runs, daemons can run a mise task, `[daemon_groups]` and `mise daemons start <group>` select subsets, and `mise daemons register`, `urls`, and `prune` round out the lifecycle. Worktrees get deterministic ports, hostnames, and optionally checkout-local `data_dir` storage without hand-assigned numbers.
- **More host software from one config:** Scoop on Windows and zypper on openSUSE/SLE join the bootstrap managers; `brew-cask` now picks the right build for the host macOS release, runs installers that need sudo, applies pkg installer choices and `set_ownership` steps, upgrades pkg-only self-updating casks, and survives DMGs with license prompts or unreadable metadata; `brew:` resolves formula aliases such as `openssl`.
- **Regressions and integrity fixes:** `enter` hooks fire again when a shell starts inside a project, npm tools with only pre-releases resolve `latest` again, generated `pre-push` hooks no longer append git's arguments to the task command, and `mise install` refuses a lockfile entry whose download URL names a different release than its `version`. Lockfile sidecars now verify on Windows checkouts with CRLF line endings.

## Added
- **daemons:** Tasks can require daemons and daemons can run tasks. `daemons = ["postgres", "nats"]` (or `true` for all project daemons) on a task starts them via pitchfork, waits for readiness, and then runs the task; already-running daemons are left alone, and `--skip-deps` / `--dry-run` skip them. A daemon can declare `task = "dev:core"` with `args` instead of `run`, and `init = [...]` runs idempotent setup commands before the long-running process on every start. `mise tasks info` shows a task's daemons. ([#13340](https://github.com/jdx/mise/pull/13340))

  ```toml
  [daemons]
  postgres = "18"

  [daemons.nats]
  run = "exec nats-server"
  ready_port = 4222

  [tasks.dev]
  daemons = ["postgres", "nats"]
  run = "npm run dev"
  ```
- **daemons:** `[daemon_groups]` names project-scoped subsets of daemons; groups may nest other groups and work wherever a daemon name does, including `--group`. `mise daemons start` with no arguments now starts the `default` group when a project declares one, and every project daemon otherwise. ([#13347](https://github.com/jdx/mise/pull/13347))

  ```toml
  [daemon_groups]
  default = ["postgres", "core", "node0"]
  two-cluster = ["default", "core2"]
  ```
- **daemons:** A daemon entry with `project = "../other-checkout"` and optional `name` runs a daemon defined in another project under that project's tools, environment, and data, and can be used in `depends`. `[daemons_settings] namespace = "services"` gives daemons stable `namespace/name` IDs (with a per-worktree suffix unless `namespace_per_worktree = false`). Requires pitchfork 2.25.0 or later. ([#13339](https://github.com/jdx/mise/pull/13339))
- **daemons:** `port = "auto"` (or `port = { auto = true, base = 3000, stride = 1 }` for custom daemons) keeps the base port in the primary checkout and derives a deterministic offset in each linked git worktree. Resolved ports are exported before startup as `PGPORT`/`DATABASE_URL` for presets and `<NAME>_PORT` for custom daemons, and `mise daemons ls --json` reports `port` and `port_auto`. mise does not fall back to another port; startup diagnoses conflicts with running mise-managed daemons in other projects, and two daemons in one project claiming the same port now fail at config load. ([#13342](https://github.com/jdx/mise/pull/13342))
- **daemons:** Every daemon with a `port` gets a stable hostname served by pitchfork's reverse proxy, exported as `<NAME>_URL` (for example `api.shop.localhost` in the primary checkout, or `api.shop-pr-42.shop.localhost` in a linked worktree). Per-daemon `proxy` (a label, `true`, or `false`) and `proxy_tls` (`"terminate"` or `"passthrough"`) control routing; the `postgres` and `redis` presets opt out. `mise daemons urls` lists hostnames, ports, proxy modes, and status. Set `proxy = false` on custom daemons that do not speak HTTP. ([#13368](https://github.com/jdx/mise/pull/13368))
- **daemons:** CockroachDB (`preset = "cockroachdb"`), NATS (`"nats"`), and SpiceDB (`"spicedb"`) presets install the tool, initialize data, wait for readiness, and export `DATABASE_URL`, `NATS_URL`, `SPICEDB_ENDPOINT`, and `SPICEDB_PRESHARED_KEY`. Presets now support named-port overrides such as `ports.http_port = 8081` and typed `options`. Unix-only; NATS and SpiceDB readiness checks need `curl`. ([#13346](https://github.com/jdx/mise/pull/13346))
- **daemons:** `mise daemons register` installs missing tools, validates the daemon graph, and registers pitchfork configuration without starting anything, so a fresh checkout can start on its first hostname request. ([#13399](https://github.com/jdx/mise/pull/13399))
- **daemons:** `mise daemons prune` finds daemon state left behind by deleted projects and worktrees, shows paths and sizes, and removes it after confirmation (`--dry-run` previews, `--yes` confirms ordinary cases). `mise daemons ls --json` adds `root`, `state_dir`, `data_size`, and `data_size_human`. ([#13338](https://github.com/jdx/mise/pull/13338))
- **daemons:** `data_dir = ".data/postgres"` keeps a preset's persistent data inside the checkout (relative to the project root; absolute and `~/` paths also work), so each worktree gets its own database. Changing the path does not move existing data. ([#13408](https://github.com/jdx/mise/pull/13408))
- **bootstrap:** A `scoop` manager for Windows. `"scoop:extras/vscode" = "latest"` adds the bucket if missing, pinned versions install via `app@version`, `state = "absent"` uninstalls, and `--update` opts in to `scoop update`. Only user-scope installs are managed; entries are skipped on other platforms. ([#13324](https://github.com/jdx/mise/pull/13324))
- **bootstrap:** A `zypper` manager for openSUSE and SUSE Linux Enterprise, supporting status, install, `name=version` pins (including downgrades), upgrade, and removal, with retries when zypper asks for a package-manager restart. ([#13335](https://github.com/jdx/mise/pull/13335), @m407)
- **bootstrap:** `process_type` on `[bootstrap.macos.launchd.agents.*]` maps to launchd's `ProcessType` (`Background`, `Standard`, `Adaptive`, `Interactive`); misspellings are rejected at config time instead of being silently ignored by launchd. ([#13402](https://github.com/jdx/mise/pull/13402), @waynehoover)
- **install:** `mise install --system` on Unix downloads, verifies, and unpacks as the invoking user, then uses sudo only to publish into the system install and shim directories. Supports relocatable tools from `aqua`, `github`, `gitlab`, `forgejo`, `http`, and `s3` without a tool-level `postinstall`; `system_packages.sudo = false` disables elevation. ([#13384](https://github.com/jdx/mise/pull/13384))
- **docker:** Official release images at `ghcr.io/jdx/mise` and `jdxcode/mise` for `linux/amd64` and `linux/arm64`, built from the minisign-verified release binaries. Tags `2026.9.12`, `2026.9`, and `latest` are a scratch image for `COPY --from=`; `*-debian` and `debian` are a Debian slim base with `curl` and `git`. ([#13413](https://github.com/jdx/mise/pull/13413))

  ```Dockerfile
  FROM debian:13-slim
  COPY --from=ghcr.io/jdx/mise:2026.9.12 /usr/local/bin/mise /usr/local/bin/mise
  ```
- **config:** `unix` is accepted as an `os` selector in `[tools]`, `[bootstrap.packages]`, `[doctor.checks]`, and `[dotfiles]` variants, matching every non-Windows platform. A concrete OS variant still wins over a `unix` one. ([#13395](https://github.com/jdx/mise/pull/13395))
- **go:** With `go` in `idiomatic_version_file_enable_tools`, the `toolchain` line of an active `go.work` selects the Go version and, as with the `go` command, member `go.mod` files are ignored in workspace mode. `GOWORK` (`auto`, `off`, or an absolute path) is honored. ([#13337](https://github.com/jdx/mise/pull/13337))
- **bazel:** `.bazelversion` is an idiomatic version file for `bazel` when enabled; only concrete releases are read, so `latest`, `last_green`, `8.x`, and commit hashes select nothing rather than failing. ([#13336](https://github.com/jdx/mise/pull/13336))
- **tasks:** File-task `#USAGE include file="..."` paths may be relative to the task file or use environment variables such as `$MISE_CONFIG_ROOT`, `$MISE_TASK_DIR`, and `$MISE_PROJECT_ROOT`, so shared flagsets no longer need absolute paths. ([#13372](https://github.com/jdx/mise/pull/13372))
- **dotfiles:** `mise dot apply` now runs matching `[history.reload]` commands for the targets it actually wrote, once each after all writes; `--dry-run` and no-op applies run none. ([#13414](https://github.com/jdx/mise/pull/13414))
- **registry:** Added `codegraph` (`aqua:colbymchenry/codegraph`). ([#13355](https://github.com/jdx/mise/pull/13355), @3w36zj6)

## Fixed
- **activate:** Starting a shell inside a trusted project runs its `enter` hook again; a regression in 2026.9.x had limited it to `cd` into the project. ([#13383](https://github.com/jdx/mise/pull/13383))
- **npm:** A tool that publishes only pre-releases (such as `@deepseek-ai/dsh`) is no longer reported missing after `mise use npm:...@latest`; `latest` falls back to the newest installed pre-release when no stable version is installed. ([#13390](https://github.com/jdx/mise/pull/13390))
- **npm:** On a shared Linux machine, users other than the first to install an `npm:` tool no longer fail with `failed to acquire project lock: Permission denied`. ([#13379](https://github.com/jdx/mise/pull/13379))
- **generate:** `mise generate git-pre-commit` hooks pass only the message file (`"$1"`) for `commit-msg`, `prepare-commit-msg`, `applypatch-msg`, and `sendemail-validate`, and no arguments for other hooks, so a `pre-push` task no longer runs `npm test origin <url>`. Existing hooks change when regenerated. ([#13377](https://github.com/jdx/mise/pull/13377))
- **lockfile:** `mise install` fails before downloading when a locked platform URL provably names a different release than the entry's `version` (for example after a tool bumped `version` in `mise.lock` without refreshing the platform block, or a release dropped a platform). `mise lock` still repairs the entry. ([#13401](https://github.com/jdx/mise/pull/13401))
- **lockfile:** Dependency sidecars under `.mise/locks/` verify on Windows checkouts where git rewrote them to CRLF, digests recorded from CRLF bytes by older versions keep working and heal on the next ordinary install, and a relocated sidecar is pinned to the bytes actually written. Repositories can drop `.mise/locks/** -text` workarounds. ([#13398](https://github.com/jdx/mise/pull/13398), [#13403](https://github.com/jdx/mise/pull/13403), [#13407](https://github.com/jdx/mise/pull/13407))
- **brew-cask:** Installs the `variations` entry Homebrew publishes for the host macOS release instead of always the newest release's build (Raycast on Sequoia now gets 1.104.x, not the Tahoe-only 2.x), and reports `not available for this platform` for null variations. ([#13376](https://github.com/jdx/mise/pull/13376))
- **brew-cask:** Installer scripts that declare `sudo: true` (such as `logi-options+`) run through mise's sudo path, and `$HOMEBREW_PREFIX`/`$APPDIR` placeholders in installer paths and arguments are expanded. ([#13380](https://github.com/jdx/mise/pull/13380))
- **brew-cask:** Casks with pkg installer `choices` (`microsoft-outlook`, `microsoft-teams`) install via `installer -applyChoiceChangesXML`; casks whose flight steps use `set_ownership` (`parsec`) install; and `mise bootstrap packages upgrade` handles self-updating casks that install only from a `.pkg` (`tailscale-app`, `karabiner-elements`) by comparing `pkgutil` receipt versions. ([#13385](https://github.com/jdx/mise/pull/13385), [#13386](https://github.com/jdx/mise/pull/13386), [#13387](https://github.com/jdx/mise/pull/13387))
- **brew-cask:** Third-party casks evaluated from Ruby can use `staged_path`, unblocking casks such as AeroSpace. ([#13369](https://github.com/jdx/mise/pull/13369), @soodoh)
- **install:** DMGs with an embedded license agreement no longer stall at `hdiutil`'s `Agree Y/N?` prompt, and DMGs with unreadable root metadata such as `.Trashes` (for example `mysqlworkbench`) extract instead of failing with `Permission denied`. Applies to `brew-cask`, `macos-app`, and aqua DMG downloads. ([#13353](https://github.com/jdx/mise/pull/13353), @hisaac; [#13378](https://github.com/jdx/mise/pull/13378))
- **brew:** Formula aliases and old names (`openssl` -> `openssl@3`, `act_runner` -> `gitea-runner`) resolve for `brew:` packages and tap formula dependencies instead of failing with a 404; mise warns to use the canonical name so `status` can track it. ([#13382](https://github.com/jdx/mise/pull/13382))
- **bootstrap:** Two spellings of one WinGet or Scoop package (`winget:Git.Git` and `winget:git.git`) that disagree on `state` or `version` are rejected with both names, instead of converging differently per machine. Entries kept apart by `os` or `env` selectors are not compared. ([#13334](https://github.com/jdx/mise/pull/13334))
- **github:** The GitHub token is sent to `raw.githubusercontent.com`, so private Homebrew taps resolve. ([#13345](https://github.com/jdx/mise/pull/13345), @waynehoover)
- **github:** `{{ version }}` in `platforms.<target>.url` is rendered with the resolved version for the GitHub, GitLab, and Forgejo backends, so versioned source archives can follow `latest`. ([#13359](https://github.com/jdx/mise/pull/13359), @casparbreloh)
- **go:** Version discovery for modules with hundreds of releases no longer times out with `No versions found`; `latest` resolves directly through the module proxy or `go list`, and release dates are fetched only for the newest versions. `minimum_release_age` stays exact by dating individual undated candidates on demand. ([#13362](https://github.com/jdx/mise/pull/13362), [#13364](https://github.com/jdx/mise/pull/13364))
- **tasks:** `mise tasks validate` recognizes child monorepo task references such as `depends = ["//crates/gui:dev"]` in `depends`, `depends_post`, `wait_for`, and structured `run`. ([#13373](https://github.com/jdx/mise/pull/13373), @nettlesh)
- **daemons:** `ready_cmd` and `health_cmd` probes run in the owning project's mise environment, so a supervisor shared by several worktrees no longer probes one checkout with another's `API_PORT`. ([#13396](https://github.com/jdx/mise/pull/13396))
- **dotfiles:** `mise dot edit` opens tracked files (`mode = "track"`) in place and inline `content` entries in their declaring config, instead of failing with `No such file or directory`; it warns when editing a tracked symlink whose destination history does not capture. ([#13332](https://github.com/jdx/mise/pull/13332))
- **history:** Checkpoints record the non-default mode of directories containing tracked files, so a `0700` `~/.claude` holding a tracked `settings.json` is recreated private on a new machine rather than `0755`. ([#13412](https://github.com/jdx/mise/pull/13412))
- **history:** The "histories are unrelated" refusal from `mise dot origin set` and `mise dot sync` now names the commands for each way out. ([#13411](https://github.com/jdx/mise/pull/13411))

## Documentation
- New "Set up a development stack" guide covering project daemons, worktree isolation, imports, registration, and idle shutdown. ([#13389](https://github.com/jdx/mise/pull/13389))
- Task templates guide documents Tera v2 components for repeated parameterized snippets inside a `run` script. ([#13388](https://github.com/jdx/mise/pull/13388))
- miser.nvim added to the IDE integration page. ([#13406](https://github.com/jdx/mise/pull/13406), @carldaws)
- Bootstrap package conflict guidance shortened and corrected. ([#13341](https://github.com/jdx/mise/pull/13341))

## Breaking Changes
- **Docker `latest` tag:** `ghcr.io/jdx/mise:latest` and `jdxcode/mise:latest` are now the scratch image (static binary and CA certificates, no shell). CI and dev-container users should switch to the `debian` tag and install their tools explicitly; the previous source-built image remains under the unsupported `dev` tag. ([#13413](https://github.com/jdx/mise/pull/13413))
- **Lockfile version/URL mismatch:** Lockfiles whose `version` disagrees with a platform URL now fail `mise install` instead of silently installing the wrong release. Run `mise lock` to regenerate the entry. ([#13401](https://github.com/jdx/mise/pull/13401))
- **Generated git hooks:** After regenerating with `mise generate git-pre-commit`, non-message hooks no longer receive git's arguments. To keep them, edit the hook to use `"$@"` and declare the arguments with `usage`. ([#13377](https://github.com/jdx/mise/pull/13377))
- **Bootstrap package spellings:** Configs declaring one WinGet or Scoop package under two spellings with conflicting `state` or `version` are rejected; delete one entry. ([#13334](https://github.com/jdx/mise/pull/13334))
- **Daemons (experimental):** `mise daemons start` with no arguments starts only the `default` group when one is declared; a project with two daemons resolving to the same port fails to load; custom daemons with a `port` now export `<NAME>_PORT` and `<NAME>_URL`, so set `proxy = false` on non-HTTP daemons. ([#13347](https://github.com/jdx/mise/pull/13347), [#13342](https://github.com/jdx/mise/pull/13342), [#13368](https://github.com/jdx/mise/pull/13368))

## New Contributors
* @m407 made their first contribution in [#13335](https://github.com/jdx/mise/pull/13335)

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.9.11...v2026.9.12

## 💚 Sponsor mise

mise is built and maintained by [@jdx](https://github.com/jdx), an open source developer at [**entire.io**](https://entire.io/), the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an [individual or company sponsor](https://jdx.dev/sponsors.html). Your support funds ongoing development and helps keep mise fast, free, and independent.

v2026.9.11

A new `macos-app` bootstrap manager installs `.app` bundles from a pinned URL and checksum when no Homebrew cask exists, task templates now compose `usage` flags and can be extended from file tasks, and Swift on Linux picks its distro build from swift.org's release index instead of a hard-coded map that 404'd on arm64 and on newer Fedora, Amazon Linux, and Arch hosts. Install failures also become far more actionable: errors name the `minimum_release_age` cutoff that hid every version, the child's last stderr line, or the shared libraries a Swift toolchain cannot load.

## Highlights
- **Apps without a cask:** `"macos-app:<name>"` entries in `[bootstrap.packages]` download, checksum-verify, and install a `.app` into `/Applications` using mise's existing cask pipeline, with stricter ownership rules for apps already at the target.
- **Task templates that actually share things:** a task that `extends` a template now inherits the template's `usage` flags alongside its own, file tasks can write `#MISE extends="..."`, and a template's `vars` can read the values the extending task supplies.
- **Swift on Linux:** arm64 downloads resolve on every distro, the build is chosen from what a release actually publishes (with a warning when a fallback is used), and a fallback that cannot start names the missing libraries instead of exiting 127 after a 1 GB download.

## Added
- **bootstrap:** The `macos-app` package manager installs a macOS `.app` bundle from a vendor or internal download. `version`, `url`, `sha256`, and `artifact` are all required (`"latest"` is rejected because mise cannot discover releases behind a plain URL); `{{version}}` is interpolated into `url`, so a release bump is a two-field edit. Only `.dmg` and `.zip` archives containing an app bundle are supported, state is kept in mise's state directory rather than Homebrew's Caskroom, and an app already at the destination that this entry does not own is refused unless `adopt = true` and the contents match. `mise bootstrap packages upgrade` cannot discover new versions for these entries, and `prune --manager macos-app` is unsupported. Prefer `brew-cask` wherever a cask exists. ([#13279](https://github.com/jdx/mise/pull/13279))

  ```toml
  [bootstrap.packages."macos-app:example"]
  version = "1.2.3"
  url = "<HTTPS URL of the .dmg or .zip; {{version}} is interpolated>"
  sha256 = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
  artifact = "Example.app"
  ```
- **tasks:** A task that names a template with `extends` and declares its own `usage` now gets the template's flags too, listed first in `--help`. Previously the task's spec replaced the template's entirely, so shared flags had to be copied into every task. Workspace-root task defaults still only fill in `usage` when the task has none. A flag declared in both places is listed twice; declare each flag in one place, or use usage flagsets for replacements. ([#13310](https://github.com/jdx/mise/pull/13310))

  ```toml
  [task_templates.deploy]
  usage = 'flag "--env <env>" help="Target environment"'

  [tasks.deploy-api]
  extends = "deploy"
  usage = 'flag "--replicas <n>" help="How many to run"'
  run = 'echo "env=$usage_env replicas=$usage_replicas"'
  ```
- **tasks:** File tasks (including remote HTTP and `git::` scripts) can use `#MISE extends="<template>"` in their header to inherit tools, env, description, aliases, and other fields from a task template; previously the field was warned about and ignored. A task whose command is a script file no longer picks up a template's `run`. ([#13307](https://github.com/jdx/mise/pull/13307))
- **swift:** When a Linux install fails its `swift --version` check, mise runs `ldd` over the toolchain and lists every unresolved shared library (for example `libform.so.6, libncurses.so.6, libpanel.so.6` on an Arch-family host running a ubi9 build), with the tool's `install_env` applied so an `LD_LIBRARY_PATH` remedy is not misreported. `docs/lang/swift.md` documents the workaround. ([#13319](https://github.com/jdx/mise/pull/13319))

## Fixed
- **swift:** Installing Swift on arm64 failed with a 404 on every Linux distro except Ubuntu (and on Windows arm64 lock entries) because only Ubuntu used swift.org's `<platform>-<arch>` download directory. ([#13293](https://github.com/jdx/mise/pull/13293), fixes [#13291](https://github.com/jdx/mise/issues/13291))
- **swift:** The Linux distro build is now chosen from swift.org's release index rather than a hard-coded map: the host's exact distro version wins, then the newest published build older than the host, then the family's oldest, with `ID_LIKE` consulted (Linux Mint gets an Ubuntu build) and unknown distros such as Arch falling back to `ubi9`. Every compromise is announced with a warning, musl hosts and unsupported architectures fail before downloading, and `swift.platform` still overrides selection without contacting swift.org. The `swift_platform` lockfile option now records the host as detected (e.g. `fedora40` instead of `fedora39`); mismatched entries are re-resolved on the next lock. ([#13297](https://github.com/jdx/mise/pull/13297), fixes [#13289](https://github.com/jdx/mise/issues/13289))
- **config:** `install_env` values are now rendered as templates like other tool options, so `LD_LIBRARY_PATH = "{{env.HOME}}/.local/lib/compat"` reaches the install subprocess expanded rather than literally. `{{version}}` is left unchanged. ([#13314](https://github.com/jdx/mise/pull/13314))
- **install:** When `minimum_release_age` (default `24h`) hides every candidate, the error names the setting and cutoff, how many releases it hid, the newest one with its release and eligibility dates, and a copy-pasteable exact pin to install it now, instead of `no versions found ... matching date filter`. A query that matched nothing is no longer blamed on the filter. ([#13308](https://github.com/jdx/mise/pull/13308))
- **cmd:** A failing command run by mise (installs, tasks, plugin scripts) now appends the child's last non-empty stderr line to the error, e.g. `exit code 127; last stderr: swift: error while loading shared libraries: libncurses.so.6 ...`. This also reaches the final error block under `--quiet`, where stderr was previously never shown. ([#13315](https://github.com/jdx/mise/pull/13315))
- **tasks:** A broken `usage` spec now reports the task name and the parser's diagnostic (`invalid usage spec for task 'deploy'` followed by the reason) instead of a bare `Invalid usage config`; file tasks render the same diagnostic rather than a Debug dump, and a missing or unreadable script is reported as such rather than as a bad spec. ([#13312](https://github.com/jdx/mise/pull/13312))
- **tasks:** A task template's `vars` can now read the vars the extending task supplies, so `{{ vars.opt | default(value='none') }}` in a template sees the task's `opt` instead of always taking the default. Literal vars within a single task are also bound first, so `vars = { msg = "hi {{ vars.who }}", who = "world" }` works regardless of declaration order. Config-level `[vars]` are unchanged. ([#13322](https://github.com/jdx/mise/pull/13322))
- **runtime symlinks:** `latest` and version-prefix links under `installs/<tool>/` that point at an install no longer eligible for a link (for example a directory left with an `incomplete` marker by an interrupted install) are now removed on rebuild instead of surviving indefinitely. Configured aliases, hand-made names, and absolute symlinks are left alone. ([#13288](https://github.com/jdx/mise/pull/13288))
- **npm:** Semver pre-releases with numeric suffixes such as `1.3.1-3` no longer claim the `latest`, `1`, and `1.3` runtime symlinks or satisfy `"latest"`/prefix requests over the newest stable install; links an older mise already wrote are cleaned up on the next install. An exact request or the `prerelease` option still selects them. ([#13272](https://github.com/jdx/mise/pull/13272) by @pataar)
- **lockfile:** `mise lock --global` on a `mise.lock` symlinked into a dotfiles repository now keeps native dependency sidecars beside the target lockfile, so `mise install --locked` works from a fresh checkout. If you used this layout on 2026.9.7 through 2026.9.10 and see missing sidecars, run `mise lock --global` again to repair the pointers. ([#13268](https://github.com/jdx/mise/pull/13268) by @nettlesh)
- **lockfile:** With `lockfile_mode = "generate"`, `mise unuse` now removes the tool's entry from `mise.lock` and its `.mise/locks/...` sidecar immediately rather than leaving them until the next `mise install` or `mise lock`. Merge mode is unchanged. ([#13304](https://github.com/jdx/mise/pull/13304))
- **conda:** Commands from `conda:` packages that have nothing to activate (no `activate.d` scripts, no dependency executables, no script entry points) are now plain symlinks instead of shell launchers, so tools like `conda:ripgrep` or `conda:gh` no longer prepend the conda prefix to the `PATH` of every child process and skip the extra shell. Packages that need activation keep their launcher; Windows is unchanged. A relative `MISE_DATA_DIR` is also handled. Existing installs keep their current entries until reinstalled with `mise install --force conda:<pkg>`. ([#13305](https://github.com/jdx/mise/pull/13305))
- **backends:** A tool's `postinstall` hook now receives pre-tools `[env]` from the config on every backend (http, aqua, github, cargo, npm, core tools), not only for asdf plugins, and a hook that changes an env input is visible to hooks ordered after it. ([#13316](https://github.com/jdx/mise/pull/13316))
- **github:** Tools whose release tags repeat the configured `version_prefix` (tag `a-a-1.2.3` with `version_prefix = "a-"`, listed as `a-1.2.3`) can now be installed; `prefix + version` is tried first so every listed version round-trips to its tag. If a repo publishes both `a-1.2.3` and `a-a-1.2.3`, requesting `a-1.2.3` now resolves to the doubled tag. ([#13317](https://github.com/jdx/mise/pull/13317))

## Changed
- **brew-cask:** Cask archives are downloaded concurrently at the configured `jobs` concurrency before the serial install pass, so `--jobs`/`MISE_JOBS` now speed up cask-heavy runs. Placement (mounting, swapping app bundles) remains serial. ([#13282](https://github.com/jdx/mise/pull/13282) by @waynehoover)

## Security
- **http:** Artifact downloads now refuse a redirect that steps down from HTTPS to HTTP, matching the policy the remote-version client already applied; the error names which kind of request was refused. URLs that are plain HTTP to begin with are unaffected. ([#13292](https://github.com/jdx/mise/pull/13292))
- **brew-cask:** The fingerprint used to adopt or refuse an existing app bundle is now computed entirely through the verified directory descriptor (`fstatat`/`openat`/`readlinkat`), so a path component swapped mid-check cannot make mise compare against a different tree than the one it will replace. Digests are unchanged, so existing receipts remain valid; large files are now hashed in-process, which can make adoption checks slower. ([#13294](https://github.com/jdx/mise/pull/13294))

## Documentation
- The bootstrap packages guide is reorganized around choosing a manager, declaring packages, and the command reference, with a dedicated section for direct `macos-app` downloads and app ownership. ([#13298](https://github.com/jdx/mise/pull/13298))
- The variables guide explains when `[vars]` resolve and why a task-local override does not recompute a top-level var that already referenced it, with task templates as the way to defer a fragment. ([#13323](https://github.com/jdx/mise/pull/13323))
- Task Arguments documents sharing flags between tasks with usage `flagset`, `use`, and `include`, in both TOML and file tasks. ([#13313](https://github.com/jdx/mise/pull/13313))

## New Contributors
* @pataar made their first contribution in [#13272](https://github.com/jdx/mise/pull/13272)

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.9.10...v2026.9.11

## 💚 Sponsor mise

mise is built and maintained by [@jdx](https://github.com/jdx), an open source developer at [**entire.io**](https://entire.io/), the title sponsor of his open source work.

If mise saves you or your team time, please consider becoming an [individual or company sponsor](https://jdx.dev/sponsors.html). Your support funds ongoing development and helps keep mise fast, free, and independent.

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!