chore(deps): bump usage to 3.2.0 and pkl to 0.31.1, add windows platforms#787
chore(deps): bump usage to 3.2.0 and pkl to 0.31.1, add windows platforms#787
Conversation
There was a problem hiding this comment.
Code Review
This pull request updates the mise.lock file to a new auto-generated format that includes comprehensive platform-specific metadata, such as checksums and download URLs, for all managed tools. The review identifies several improvement opportunities: missing checksum fields for specific Windows platform entries in the bun and ripgrep tools, and a redundant duplicate entry for an older version of hadolint that should be removed for clarity.
| [tools.bun."platforms.windows-arm64"] | ||
| url = "https://github.com/oven-sh/bun/releases/download/bun-v1.2.20/bun-windows-aarch64.zip" |
| [[tools.hadolint]] | ||
| version = "2.12.0" | ||
| backend = "ubi:hadolint/hadolint" | ||
| backend = "aqua:hadolint/hadolint" | ||
|
|
||
| [tools.hadolint."platforms.linux-arm64"] | ||
| checksum = "sha256:5798551bf19f33951881f15eb238f90aef023f11e7ec7e9f4c37961cb87c5df6" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-arm64" | ||
|
|
||
| [tools.hadolint."platforms.linux-x64"] | ||
| checksum = "sha256:56de6d5e5ec427e17b74fa48d51271c7fc0d61244bf5c90e828aab8362d55010" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Linux-x86_64" | ||
|
|
||
| [tools.hadolint."platforms.macos-arm64"] | ||
| checksum = "sha256:2a5b7afcab91645c39a7cebefcd835b865f7488e69be24567f433dfc3d41cd27" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Darwin-x86_64" | ||
|
|
||
| [tools.hadolint."platforms.macos-x64"] | ||
| checksum = "sha256:2a5b7afcab91645c39a7cebefcd835b865f7488e69be24567f433dfc3d41cd27" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Darwin-x86_64" | ||
|
|
||
| [tools.hadolint.platforms.macos-arm64-hadolint] | ||
| checksum = "blake3:8be7ee4645cf6f43c8046be07b77caef5d7cf2ab9cc50ee4e965be20350f2dad" | ||
| [tools.hadolint."platforms.windows-arm64"] | ||
| checksum = "sha256:ed89a156290e15452276b2b4c84efa688a5183d3b578bfaec7cfdf986f0632a8" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Windows-x86_64.exe" | ||
|
|
||
| [tools.ktlint] | ||
| [tools.hadolint."platforms.windows-x64"] | ||
| checksum = "sha256:ed89a156290e15452276b2b4c84efa688a5183d3b578bfaec7cfdf986f0632a8" | ||
| url = "https://github.com/hadolint/hadolint/releases/download/v2.12.0/hadolint-Windows-x86_64.exe" |
| [tools.ripgrep."platforms.windows-arm64"] | ||
| url = "https://github.com/BurntSushi/ripgrep/releases/download/14.1.1/ripgrep-14.1.1-x86_64-pc-windows-msvc.zip" | ||
|
|
||
| [tools.swiftlint] | ||
| version = "0.59.1" | ||
| backend = "asdf:swiftlint" | ||
| [tools.ripgrep."platforms.windows-x64"] | ||
| url = "https://github.com/BurntSushi/ripgrep/releases/download/14.1.1/ripgrep-14.1.1-x86_64-pc-windows-msvc.zip" |
82a18bf to
4c73202
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| url = "https://github.com/astral-sh/uv/releases/download/0.8.23/uv-x86_64-apple-darwin.tar.gz" | ||
| [tools.uv."platforms.windows-arm64"] | ||
| checksum = "sha256:171b7ccda1bbd562da6babeffcf533a1c6cc7862cf998da826e1db534fc43e48" | ||
| url = "https://github.com/astral-sh/uv/releases/download/0.11.2/uv-x86_64-pc-windows-msvc.zip" |
There was a problem hiding this comment.
uv windows-arm64 entry uses wrong x86_64 binary URL
Medium Severity
The tools.uv."platforms.windows-arm64" entry points to uv-x86_64-pc-windows-msvc.zip instead of the native uv-aarch64-pc-windows-msvc.zip binary that uv 0.11.2 actually publishes. The checksum is also identical to the windows-x64 entry, confirming both entries reference the same x86_64 artifact. This means Windows ARM64 users will get an x86_64 binary running under emulation instead of the native ARM64 build.
…orms - Bump usage 2.8.0 -> 3.2.0 (adds Windows support, fixes ci-windows) - Bump pkl 0.29.0 -> 0.31.1 - Add Windows platform entries to lockfile - Regenerate mise.lock with new format Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
4c73202 to
78e54f1
Compare
Greptile SummaryThis PR regenerates Key observations:
Confidence Score: 4/5Safe to merge for the stated Windows CI goal, but worth verifying cargo-binstall availability on macOS/Windows before landing. The core change (usage 3.2.0 + pkl 0.31.1 + Windows platform entries) is straightforward. The P1 concern is the loss of cargo-binstall platform entries for macOS and Windows — if any CI job or contributor workflow depends on it outside linux-x64 this will silently fail. Once that is confirmed non-impactful the score would be 5/5. mise.lock — specifically the cargo-binstall section and the new windows-arm64 entries for uv, pkl, ripgrep, and vhs. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[mise lock regenerated] --> B[usage 2.8.0 → 3.2.0]
A --> C[pkl 0.29.0 → 0.31.1]
A --> D[Other tools rolled back\ne.g. node, bun, ripgrep…]
B --> E[Windows platform entries added\nfor usage ✅]
B --> F[docs/cli/commands.json regenerated\ndefault: string → array]
C --> G[pkl windows-arm64 added\nuses amd64.exe ⚠️]
A --> H[windows-arm64 entries added\nfor all tools]
H --> I[pkl → amd64.exe x64 fallback ⚠️]
H --> J[uv → x86_64 binary x64 fallback ⚠️]
H --> K[ripgrep/vhs → x86_64 fallback ⚠️]
H --> L[bun windows-arm64 missing checksum ⚠️]
D --> M[cargo-binstall 1.16.2 → 1.14.4\nLoses macos + windows platform entries ❌]
|
| [tools.git-cliff."platforms.macos-arm64"] | ||
| checksum = "sha256:98cf636ca6a66d84e0ba6202a990028ac45cf0dde331d18169397ae59cc6e41b" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-aarch64-apple-darwin.tar.gz" | ||
| checksum = "sha256:a2c37949a7fe6929ba0c7e1628f650aa4e9d2e616b3f32d502feedf3f72f5950" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-aarch64-apple-darwin.tar.gz" | ||
|
|
||
| [tools.git-cliff."platforms.macos-x64"] | ||
| checksum = "sha256:c3111dddaf866a986085f22ff22fa3003645fc69a3b9302c4e1352c4676c398a" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-x86_64-apple-darwin.tar.gz" | ||
| checksum = "sha256:bc03321d61383241003c6bc983f3010c88eedad4b2807c35a3f2f314e34e831b" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-x86_64-apple-darwin.tar.gz" | ||
|
|
||
| [tools.git-cliff."platforms.macos-x64-baseline"] | ||
| checksum = "sha256:c3111dddaf866a986085f22ff22fa3003645fc69a3b9302c4e1352c4676c398a" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-x86_64-apple-darwin.tar.gz" | ||
| checksum = "sha256:bc03321d61383241003c6bc983f3010c88eedad4b2807c35a3f2f314e34e831b" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-x86_64-apple-darwin.tar.gz" | ||
|
|
||
| [tools.git-cliff."platforms.windows-arm64"] | ||
| checksum = "sha256:2f78de42c046ff755f795eaa6c4bcd2df46904fbb28893c2d30c13c07673a1b7" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-aarch64-pc-windows-msvc.zip" | ||
|
|
||
| [tools.git-cliff."platforms.windows-x64"] | ||
| checksum = "sha256:073c8027da2e055ec83c3609c4195284bd10b2771fcbd806ff0f94e48c310c77" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-x86_64-pc-windows-msvc.zip" | ||
| checksum = "sha256:460a455bf0c6f4a0a9f5bab31d151ed483451dfd5bf60ddfa5eb6a1173b0d1cd" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-x86_64-pc-windows-msvc.zip" | ||
|
|
||
| [tools.git-cliff."platforms.windows-x64-baseline"] | ||
| checksum = "sha256:073c8027da2e055ec83c3609c4195284bd10b2771fcbd806ff0f94e48c310c77" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-x86_64-pc-windows-msvc.zip" | ||
| checksum = "sha256:460a455bf0c6f4a0a9f5bab31d151ed483451dfd5bf60ddfa5eb6a1173b0d1cd" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.0/git-cliff-2.10.0-x86_64-pc-windows-msvc.zip" | ||
|
|
||
| [[tools.node]] | ||
| version = "24.11.1" | ||
| version = "24.6.0" |
There was a problem hiding this comment.
cargo-binstall loses all non-Linux-x64 platform entries
After this change, cargo-binstall (downgraded from 1.16.2 → 1.14.4) has only a single platform entry: linux-x64. The previous lockfile had entries for linux-arm64, macos-arm64, macos-x64, and windows-x64. Those entries are now gone.
If any CI job or developer workflow uses cargo-binstall on macOS or Windows, mise install will either fail or silently fall back to a compilation-from-source path. Given that this PR adds Windows CI support and bumps other tools, it is worth verifying that cargo-binstall is either not needed on those platforms, or confirming that mise falls back gracefully when no matching platform entry exists in the lockfile.
| [tools.git-cliff."platforms.linux-x64"] | ||
| checksum = "sha256:55ed8495e8c18e51e42182e17772013d6d2a7156a462d6b30f1adf17e54b465e" | ||
| url = "https://github.com/orhun/git-cliff/releases/download/v2.10.1/git-cliff-2.10.1-x86_64-unknown-linux-musl.tar.gz" | ||
| checksum = "sha256:1cf5298984816684c408b365a3bf772422a69a40a37b694498e91b02e1825fd8" |
There was a problem hiding this comment.
bun windows-arm64 entry missing checksum
The new windows-arm64 entry for bun (and similarly ripgrep's windows-arm64, windows-x64, and windows-x64-baseline entries) have no checksum field, while all other bun platform entries include one. This reduces the integrity guarantee mise provides for those downloads. If the upstream release does supply a checksum, it would be worth capturing it here.
### 🚀 Features - **(betterleaks)** add betterleaks config to hk builtin config by [@hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#750](#750) - **(builtins)** add google-java-format to builtins by [@timothysparg](https://github.com/timothysparg) in [#777](#777) - **(builtins)** add dclint to builtins by [@timothysparg](https://github.com/timothysparg) in [#779](#779) - **(config)** set default value for exclude to List() by [@timothysparg](https://github.com/timothysparg) in [#781](#781) - **(core)** add required field to prevent unconfigured steps from running by [@timothysparg](https://github.com/timothysparg) in [#785](#785) - **(gitleaks)** add gitleaks config to hk builtin config by [@hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#749](#749) - **(mdschema)** add mdschema config to hk builtin config by [@hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#748](#748) - **(pkl)** add pklr as opt-in pkl backend by [@jdx](https://github.com/jdx) in [#769](#769) - add pklr as opt-in pkl backend by [@jdx](https://github.com/jdx) in [#768](#768) ### 🐛 Bug Fixes - **(docs)** replace invalid /latest/ pkl package URIs with versioned format by [@jdx](https://github.com/jdx) in [#770](#770) - **(stage)** do not stage pre-existing untracked files by [@jdx](https://github.com/jdx) in [#788](#788) ### 📚 Documentation - add benchmarks page and reproducible benchmark suite by [@jdx](https://github.com/jdx) in [#766](#766) - add recommended setup section to mise integration by [@timothysparg](https://github.com/timothysparg) in [#780](#780) ### 📦️ Dependency Updates - lock file maintenance by [@renovate[bot]](https://github.com/renovate[bot]) in [#762](#762) - update rust crate pklr to 0.4 by [@renovate[bot]](https://github.com/renovate[bot]) in [#776](#776) - update apple-actions/import-codesign-certs digest to fe74d46 by [@renovate[bot]](https://github.com/renovate[bot]) in [#774](#774) - update anthropics/claude-code-action digest to 094bd24 by [@renovate[bot]](https://github.com/renovate[bot]) in [#773](#773) - update taiki-e/upload-rust-binary-action digest to 0e34102 by [@renovate[bot]](https://github.com/renovate[bot]) in [#775](#775) - bump usage to 3.2.0 and pkl to 0.31.1, add windows platforms by [@jdx](https://github.com/jdx) in [#787](#787) - lock file maintenance by [@renovate[bot]](https://github.com/renovate[bot]) in [#786](#786) ### New Contributors - @timothysparg made their first contribution in [#781](#781) <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Medium Risk** > Primarily a version/documentation bump, but it also updates the Rust dependency lockfile (e.g., `hyper` and `windows-sys`), which could introduce build/runtime regressions. > > **Overview** > Bumps hk to **v1.40.0** and publishes the corresponding release notes in `CHANGELOG.md`. > > Updates generated CLI/docs and all Pkl package URL references in docs/examples to point at `v1.40.0`, and refreshes `Cargo.lock` with dependency updates/removals consistent with the new release. > > <sup>Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit da00ab8. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).</sup> <!-- /CURSOR_SUMMARY --> Co-authored-by: mise-en-dev <123107610+mise-en-dev@users.noreply.github.com>
This MR contains the following updates: | Package | Update | Change | |---|---|---| | [hk](https://github.com/jdx/hk) | minor | `1.39.0` → `1.40.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>jdx/hk (hk)</summary> ### [`v1.40.0`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1400---2026-04-01) [Compare Source](jdx/hk@v1.39.0...v1.40.0) ##### 🚀 Features - **(betterleaks)** add betterleaks config to hk builtin config by [@​hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#​750](jdx/hk#750) - **(builtins)** add google-java-format to builtins by [@​timothysparg](https://github.com/timothysparg) in [#​777](jdx/hk#777) - **(builtins)** add dclint to builtins by [@​timothysparg](https://github.com/timothysparg) in [#​779](jdx/hk#779) - **(config)** set default value for exclude to List() by [@​timothysparg](https://github.com/timothysparg) in [#​781](jdx/hk#781) - **(core)** add required field to prevent unconfigured steps from running by [@​timothysparg](https://github.com/timothysparg) in [#​785](jdx/hk#785) - **(gitleaks)** add gitleaks config to hk builtin config by [@​hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#​749](jdx/hk#749) - **(mdschema)** add mdschema config to hk builtin config by [@​hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#​748](jdx/hk#748) - **(pkl)** add pklr as opt-in pkl backend by [@​jdx](https://github.com/jdx) in [#​769](jdx/hk#769) - add pklr as opt-in pkl backend by [@​jdx](https://github.com/jdx) in [#​768](jdx/hk#768) ##### 🐛 Bug Fixes - **(docs)** replace invalid /latest/ pkl package URIs with versioned format by [@​jdx](https://github.com/jdx) in [#​770](jdx/hk#770) - **(stage)** do not stage pre-existing untracked files by [@​jdx](https://github.com/jdx) in [#​788](jdx/hk#788) ##### 📚 Documentation - add benchmarks page and reproducible benchmark suite by [@​jdx](https://github.com/jdx) in [#​766](jdx/hk#766) - add recommended setup section to mise integration by [@​timothysparg](https://github.com/timothysparg) in [#​780](jdx/hk#780) ##### 📦️ Dependency Updates - lock file maintenance by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​762](jdx/hk#762) - update rust crate pklr to 0.4 by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​776](jdx/hk#776) - update apple-actions/import-codesign-certs digest to [`fe74d46`](jdx/hk@fe74d46) by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​774](jdx/hk#774) - update anthropics/claude-code-action digest to [`094bd24`](jdx/hk@094bd24) by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​773](jdx/hk#773) - update taiki-e/upload-rust-binary-action digest to [`0e34102`](jdx/hk@0e34102) by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​775](jdx/hk#775) - bump usage to 3.2.0 and pkl to 0.31.1, add windows platforms by [@​jdx](https://github.com/jdx) in [#​787](jdx/hk#787) - lock file maintenance by [@​renovate\[bot\]](https://github.com/renovate\[bot]) in [#​786](jdx/hk#786) ##### New Contributors - [@​timothysparg](https://github.com/timothysparg) made their first contribution in [#​781](jdx/hk#781) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlJlbm92YXRlIEJvdCIsImF1dG9tYXRpb246Ym90LWF1dGhvcmVkIiwiZGVwZW5kZW5jeS10eXBlOjptaW5vciJdfQ==-->


Summary
usage2.8.0 -> 3.2.0 (adds Windows support, fixes ci-windows failure on all PRs)pkl0.29.0 -> 0.31.1mise.lockwith new formatTest plan
ci-windowspassesci-otherpasses (pkl eval still works)🤖 Generated with Claude Code
This comment was generated by Claude Code.
Note
Medium Risk
Mostly a tooling lockfile change, but it alters pinned versions and platform artifacts, which can impact local dev environments and CI behavior across platforms.
Overview
Regenerates
mise.locksomisecan install tools on Windows (addswindows-arm64/windows-x64platform entries, notably forusage, to unblock Windows CI).As part of the lockfile regeneration, several pinned tool versions and download checksums/URLs are updated (some bumped, some rolled back), and the lockfile format is simplified by dropping various duplicate platform variants (e.g.,
*-musl,*-baseline).Written by Cursor Bugbot for commit 78e54f1. This will update automatically on new commits. Configure here.