v2026.2.13: : Fix GitHub attestation verification failures

Compare Source

This release partially mitigates GitHub attestation verification failures that were causing tool installations to fail (e.g., gh, and other aqua-backed tools with attestations enabled). See #​8142 for details.

What happened

GitHub silently changed their attestations API to externalize bundle storage to Azure Blob Storage (tmaproduction.blob.core.windows.net) using Snappy compression, rather than returning bundles inline as JSON. The gh CLI had already been updated to handle this (cli/cli#10185), but third-party tools like mise were not yet aware of the new format, causing "error decoding response body" failures.

What this release does

Bumps sigstore-verification to 0.2, which splits the reqwest dependency version from mise's (0.13 vs 0.12). This avoids Cargo feature unification that was causing mise's gzip feature to be applied to attestation requests, interfering with the Snappy-compressed responses.

Note: A full fix with proper Snappy decompression support and auth token scoping landed in sigstore-verification v0.2.1 (#​22, #​23) — expect a follow-up mise release with that bump.

If you are still hitting issues, set settings.aqua.github_attestations = false as a workaround.

Dependency Updates

• Bumped sigstore-verification to 0.2 (e8897c9)

📦 Aqua Registry Updates

New Packages (1)

• k1LoW/tcmux

Updated Packages (1)

• jdx/usage

v2026.2.11: : Templates Level Up

Compare Source

A small release with a nice quality-of-life improvement for tera template users and a bug fix for file watching.

Highlights

• Array access for multi-version tools in tera templates — If you have multiple versions of a tool installed, you can now access them individually in tera templates via tools.<name>[0].path, tools.<name>[1].path, etc. Single-version tools continue to work as before with tools.<name>.path. #​8129

Bug Fixes

• hook-env now watches files used in tera templates — Files referenced by template functions like read_file(), hash_file(), file_size(), and last_modified() are now properly tracked by hook-env. Previously, changes to these files wouldn't trigger an environment refresh until you changed directories. #​8122

New Tools

• mutagen — thanks @​tony-sol! #​8125
• communique #​8126

v2026.2.10: : Shims, Stdin, and Smarter Offline

Compare Source

This release brings several quality-of-life features alongside a solid round of bug fixes.

Highlights

• Shims as PATH fallback during activation — When not_found_auto_install is enabled (the default), mise now adds the shims directory to your PATH as a fallback. This fixes a subtle issue where subshells or child processes could miss uninstalled tools or pick up the wrong system version instead of the mise-managed one. Thanks @​ctaintor for this contribution! #​8106

• tools variable in Tera templates — You can now reference {{ tools.node.version }} and {{ tools.node.path }} directly in env templates and task templates (with tools = true), eliminating the need for exec(command='node --version') workarounds. #​8108 — Template docs

• mise set --stdin for multiline values — Need to set an SSH key, certificate, or other multiline value as an environment variable? mise set --stdin MY_KEY now reads from stdin until EOF. #​8110

Bug Fixes

• MISE_OFFLINE now works correctly — Previously, offline mode could hang or error out instead of gracefully falling back to local data. This is now fixed, and offline/prefer_offline are proper settings configurable in mise.toml. #​8109
• Upgrade symlink cleanup — Fixed an issue where mise upgrade could leave behind invalid symlinks when uninstalling old versions, thanks @​roele. #​8099 #​8101
• Conda dependency resolution — Improved patchelf handling and dependency version pinning for complex conda packages on Linux. #​8087
• SLSA provenance for Docker Buildx — Tools like github:docker/buildx that ship in-toto statements without sigstore signatures no longer fail verification, thanks @​gerhard. #​8094
• Vfox plugin auto-installation — Fixed a clean-setup failure where vfox-backed env modules would error with "Plugin directory not found" before the plugin was installed, thanks @​pose. #​8035
• GitHub latest version prefix — The v prefix is no longer incorrectly added when resolving "latest" for GitHub release backends. #​8105
• GitLab tool options — Tool options from config are now correctly resolved for aliased GitLab tools. #​8084
• Flutter version resolution — Fixed version resolution by using version_expr. #​8081
• Tuist on Linux — Registry now includes Linux support for tuist, thanks @​fortmarek. #​8102

Registry

• Added conda backends for mysql, ffmpeg, ghc, vim, and several other previously asdf-only tools. #​8080 #​8083
• Added podman-tui, thanks @​tony-sol. #​8098

New Contributors

Welcome @​ctaintor, @​rileychh, @​fortmarek, @​pose, and @​gerhard — thanks for your first contributions!

📦 Aqua Registry Updates

New Packages (2)

• entireio/cli
• rmitchellscott/reManager

Updated Packages (1)

• atuinsh/atuin

v2026.2.9: : Ruby Plays Nice with Legacy Linux

Compare Source

This release brings a quality-of-life improvement for Ruby users on older Linux distributions, plus a couple of important bug fixes.

Highlights

Automatic Ruby variant selection for older glibc systems (#​8069)

If you're running Linux with glibc older than 2.35 (common on RHEL 7, Amazon Linux 2, CentOS 7, or older Debian/Ubuntu versions), mise will now automatically download the no-YJIT precompiled Ruby variant instead of failing with cryptic errors. This means precompiled Ruby "just works" on a much wider range of Linux systems without any manual configuration. Systems with glibc 2.35+ (Ubuntu 22.04+, Debian 12+, Fedora 36+) continue to get the standard YJIT-enabled builds as before.

Bug Fixes

• Windows shim updates with self-update (#​8075) — mise self-update on Windows now properly updates mise-shim.exe alongside mise.exe. Previously, users had to manually download the shim from GitHub releases after updating.

• Fixed cargo install mise (#​8077) — Bumped the xx dependency to 2.5 to fix an issue where Cargo was selecting an incompatible older version, causing installation failures. Thanks @​erickt for the fix and welcome to mise!

Documentation

• Ruby precompiled binaries are no longer marked as experimental (#​8073) — they're stable and ready for production use.

📦 Aqua Registry Updates

Updated Packages (1)

• carthage-software/mago

v2026.2.8: : Hooks Get Their Act Together

Compare Source

This release focuses on hooks—fixing 12 community-reported issues that were making them unreliable. There are also some nice quality-of-life improvements for Node.js and Ruby users.

Highlights

Hooks overhaul — A comprehensive fix for the hooks system addressing a dozen issues reported by the community. Global hooks now actually work, hook execution order is corrected (leave fires before enter), infinite loops in fish shell are fixed, and postinstall hooks can now find all installed tools. #​8058

Node version detection from package.json — mise now reads tool versions directly from package.json using the devEngines and packageManager fields. This means your Node, Bun, pnpm, yarn, and npm versions can be auto-detected without a separate .tool-versions or mise.toml file. Semver ranges are simplified automatically (>=18.0.0 → 18). #​8059

Precompiled Ruby goes stable — You can now use precompiled Ruby binaries by setting ruby.compile=false without needing experimental=true. This will become the default in 2026.8.0. If you haven't tried it, precompiled Ruby installs in seconds instead of minutes. #​8052

New Features

• --dry-run-code flag — Added to install, upgrade, prune, uninstall, and use commands. Behaves like --dry-run but exits with code 1 when there's work to do, enabling patterns like if ! mise install --dry-run-code -q; then mise install; fi #​8063

Bug Fixes

• MISE_ARCH override — The bun and erlang plugins now respect MISE_ARCH at runtime, which is useful for Windows ARM64 users running x64 binaries under emulation #​8062
• key=value format — mise settings set, mise settings add, mise config set, and mise shell-alias set now accept key=value as a single argument #​8053

Registry

• Added quicktype (npm:quicktype) — thanks @​zdunecki! #​8054

Dependencies

• Upgraded to TOML 1.1 support via toml 0.9 and toml_edit 0.24 #​8057