fix(deps): update all non-major dependencies - #118

v2026.8.15: : Dotfiles diff and capture, scoped config updates, and per-tool postinstall hooks

Compare Source

This release expands the dotfiles/bootstrap workflow with previews, bulk capture, git-tracked manifests, and profile reconciliation, adds scoped config collection updates and per-tool postinstall hooks, and rounds it out with a large batch of fixes across tasks, schema validation, Windows, lockfiles, and shims.

Highlights

• Dotfiles management grows a full preview-and-capture workflow: mise bootstrap dotfiles diff, bulk add --changed, git-tracked directory manifests, and automatic reconciliation when a profile switches a target's source.
• mise config set learns idempotent list updates (--append/--remove) and explicit --global/--system targeting, and mise use gains per-tool --postinstall hooks.
• Safer upgrades: replaced tool versions now linger for a grace period instead of being deleted immediately, so a bad upgrade is easier to recover from.

Added

• dotfiles: New mise bootstrap dotfiles diff previews exactly what apply would change without writing anything, printing unified content patches for copy, template, and inline entries and structural summaries for symlinks and directories. Optional target filters use the same selection semantics as apply. (#​12511 by @​jdx)

• dotfiles: mise bootstrap dotfiles add --changed captures every drifted copy-mode target back into its source in one command, without naming each path. Directory copies, symlinks, templates, and inline content are skipped, and untrusted configs are blocked. (#​12512 by @​jdx)

• dotfiles: Directory copy and symlink-each entries can now set manifest = "git" to manage only paths returned by git ls-files, so a dotfiles repo that gitignores everything and force-adds selected paths no longer traverses (or links) ignored home-directory content. Links are removed when a file drops out of the index. (#​12523 by @​jdx)

• dotfiles: symlink-each apply now reconciles stale links when a profile change (for example toggling MISE_ENV between home and work) points a target at a different source. Only links still pointing at the previously recorded source are removed; unmanaged paths and paths desired by another active source are left alone, and dry-run previews the removals. (#​12524 by @​jdx)

• bootstrap: mise bootstrap --from <git-url> clones a setup/dotfiles repo (into $MISE_DATA_DIR/bootstrap-repo by default, or --from-dir), then runs bootstrap from that checkout. Existing checkouts are reused when the origin matches, --update fast-forwards them, and --dry-run only prints the planned git clone/git pull. (#​12525 by @​jdx)

• use: mise use --postinstall <COMMAND> attaches a per-tool post-install hook that runs only when that tool is installed or reinstalled. Repeat the flag before each tool to give each its own hook. (#​12609 by @​jdx)

  mise use --postinstall "mbx setup --defaults" mr-boxington

• config: mise config set gains --append and --remove for list-like keys (append without duplicates, remove matching entries, promote scalars to arrays as needed) while preserving TOML comments and formatting, plus explicit --global/--system targeting for config get/set. Tool postinstall hooks now also receive MISE_CONFIG_FILE, MISE_GLOBAL_CONFIG_FILE, MISE_CONFIG_ROOT, and MISE_PROJECT_ROOT. (#​12603 by @​jdx)

• config: Templates can now reference config_source, the absolute path of the config file the template lives in (not resolved through symlinks). This lets a shared config symlinked into conf.d add its own real directory to PATH, for example {{ config_source | canonicalize | dirname }}/bin. Available in mise.toml, .tool-versions, [env] directives, and [settings.age]. (#​12454 by @​Marukome0743)

• task: task_source_files(only_changed=true) returns only the sources written since the task last succeeded, so linters and formatters can run against just what changed. A failed run keeps its files outstanding until the task passes. (#​12470 by @​Marukome0743)

• outdated: mise outdated --json now includes a release_url field pointing at the release page for the offered version (from the versions host, aqua, GitHub/GitLab, or the rust core plugin). The key is omitted rather than null when no page is available. (#​12494 by @​Marukome0743)

Changed

• upgrade: mise upgrade no longer deletes the replaced install immediately. When upgrade.auto_prune is on, the old version stays on disk and is scheduled for removal after upgrade.prune_after (default 24h), cleaned up opportunistically on later runs. --prune still removes immediately and --no-prune keeps the old tree with no scheduled cleanup. mise ls surfaces deferred removals. (#​12593 by @​jdx)

Fixed

• env,tasks: .env files written as UTF-16 (the default from Windows PowerShell 5.1's > and Out-File) are now decoded and loaded instead of being silently dropped, and a UTF-16 task file now gets a clear hint to save it as UTF-8. (#​12507 by @​JamBalaya56562)
• install: mise install --dry-run no longer claims it would install a tool that cannot actually be installed on this platform. (#​12568 by @​JamBalaya56562)
• exec: mise exec now reports clearly when a requested tool is not available on the current platform. (#​12547 by @​JamBalaya56562)
• config: Request-specific tool options are preserved rather than dropped during config merges. (#​12060 by @​risu729)
• config: A bare tool_alias value is now resolved through the registry. (#​12506 by @​Marukome0743)
• config: Minimum-release-age exclusions from multiple configs are merged instead of overwritten. (#​12460 by @​jdx)
• lockfile: Version ties are broken correctly when a legacy lockfile answers latest, and links belonging to other backends are ignored. (#​12583, #​12605 by @​Marukome0743, @​jdx)
• monorepo: Idiomatic version files are resolved from the task's own config root. (#​12565 by @​kaii-zen)
• task: Several ordering fixes so injected and dependency tasks keep their intended slots, tasks that link back into themselves are skipped, and taskkill output is suppressed on Windows. (#​12450, #​12466, #​12482, #​12510, #​12563 by @​Marukome0743, @​jrandolf, @​JamBalaya56562, @​sortA0329)
• shims/generate: Arguments are now delivered intact for file-mode shims and Windows launchers, and mise generate explains when a --mise-bin path has no Windows launcher. Non-executable system fallbacks are skipped. (#​12502, #​12463, #​12496, #​12545 by @​JamBalaya56562, @​jdx)
• http: Raw binaries are copied on Windows where a junction cannot name a file, and a download that fails because the path is too long now explains itself. (#​12465, #​12550 by @​Marukome0743, @​JamBalaya56562)
• link/file: Links whose target no longer exists can now be shown and removed. (#​12468, #​12469 by @​JamBalaya56562)
• trust: The ignore list is now read by what its entries point at, matching how trust links are stored. (#​12428 by @​JamBalaya56562)
• watch: The terminal is restored when the watched process is signalled. (#​12451 by @​Marukome0743)
• activate: The pwsh deactivation preamble no longer pollutes $Error. (#​12483 by @​JamBalaya56562)
• backend: Rolling updates behind a versions host are now detected. (#​12440 by @​jdx)
• github: Stale cached attestations are retried. (#​12495 by @​jdx)
• ls-remote: Recorded listing errors now cause a failure instead of returning stale/empty results. (#​12551 by @​jdx)
• npm: Dangling aube-backed tool installs are repaired. (#​12570 by @​jdx)
• bootstrap: Brew cask dependencies are preserved during prune. (#​12461 by @​jdx)
• azure: The CLI now includes pip for extension support. (#​12555 by @​esteve)
• registry: Windows/arm64 can fall back to x64 backends, as aqua already does. (#​12560 by @​JamBalaya56562)
• doctor: The self-update leftover check is gated so it does not fire for installs that manage updates elsewhere. (#​12438 by @​salim-b)
• schema: Several JSON schema corrections so registry, plugin, tool-option, and settings definitions match what the build consumers actually accept. (#​12514, #​12515, #​12520, #​12522, #​12527 by @​risu729)

Performance

• brew: Homebrew bootstrap bottles are now downloaded concurrently (bounded by MISE_JOBS), while pouring, source builds, and prefix linking stay in dependency order. (#​12604 by @​jdx)

Registry

New tools: pkgx, onefetch, syncthing, ols, spin-framework, cursor-agent, 7zip, mosh, pastel, broot, exiftool, spotify-player, yt-dlp-nightly, and cliamp. magika and sbt now install from their GitHub releases, and pre-commit uses the pipx backend on Windows. Various dependency and OS-limit cleanups were also applied. (#​12272, #​12437, #​12448, #​12484, #​12485, #​12478, #​12486, #​12532, #​12535, #​12533, #​12538, #​12539, #​12542, #​12581, #​12553, #​12567, #​12549)

New Contributors

• @​sortA0329 made their first contribution in #​12563
• @​seuros made their first contribution in #​12519
• @​pb3975 made their first contribution in #​12478
• @​ThorstenHans made their first contribution in #​12485

Full Changelog: jdx/mise@v2026.8.14...v2026.8.15

💚 Sponsor mise

mise is maintained by @​jdx, an open source developer for entire.io, the title sponsor of the jdx.dev open source tools. Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at jdx.dev. Individual and company sponsorships keep mise fast, free, and independent.

v0.61.0

Compare Source

Highlights

• Subagent runs use less context and repeat less status text, so everyday delegation is cheaper and easier to scan.
• Status, Fleet, widgets, RPC, and background-work views refresh with less duplicated work.
• Async recovery is more reliable when active status files, child reports, or provider fallback attempts go wrong.
• Workflow permissions are clearer with named workflow resources and bg_wait as the primary background wait tool.
• Model listings now show effective models for discovered and runtime-registered agents.

Added

• Add extension-owned named workflow resources so permission and policy extensions can distinguish trusted workflow resources from raw scripts. Thanks @​mathiasloh for #​1751.
• Add workflow-only globalConcurrencyLimit and maxSubagentSpawnsPerRun overrides for top-level workflowScript calls. Thanks @​RapierCraft for #​1760.
• Add bg_wait as the primary background-work wait tool while keeping subagent_wait as a deprecated compatibility alias (#​1729).

Changed

• Show effective model mappings for discovered and runtime-registered subagents through management and /subagents-models. Thanks @​RapierCraft for #​1732.
• Trim default subagent prompt guidelines to five parent-facing entries while keeping advanced workflow details in the packaged guide. Thanks @​Ran-Xing for #​1746.
• Reduce repeated heartbeat status updates during delegated runs while keeping foreground progress and complete terminal responses (#​1739).
• Clarify that fallbackModels handles provider/model timeouts but not run-level timeoutMs / maxRuntimeMs expiry. Thanks @​kaplan-shaked for #​1745.
• Pass requested session and timestamp context to background-work providers so they can avoid listing unrelated sessions while preserving strict validation (#​1737).
• Avoid repeated external-run display normalization during Fleet refresh while still validating externally replaced or mutated records (#​1736).
• Clarify that oracle and top-reasoning models are escalation tools, not routine defaults.
• Serve broad RPC status requests from restored in-memory state when safe, while preserving targeted status and transcript behavior (#​1735).

Fixed

• Isolate corrupt active async status files during restoration so valid runs remain available and corrupt run artifacts are preserved. Thanks @​zhexulong for #​1756.
• Reduce async widget update churn during running workflows by repainting animation ticks without reinstalling the widget and coalescing close status refreshes (#​1726).
• Avoid repeated staged workflow projection during widget rendering. Thanks @​kkkhs for #​1730.
• Preserve durable file-only child reports and continue read-only workflow review after malformed acceptance metadata (#​1724).
• Preserve model origins across fallback and fork preparation, so eligible fallbacks work for unavailable configured primaries while invalid explicit models still fail closed. Thanks @​xz-dev for #​1747.
• Stop hidden 125ms spinner redraws while keeping progress refreshes and one-second animation frames (#​1747).