### 🐛 Bug Fixes

- **(backend)** filter pre-release versions with latest + install_before
by @koh-sh in [#7631](#7631)
- **(docs)** formatting in configuration hierarchy section by
@jonathanagustin in [#7638](#7638)
- **(npm)** migrate npm publish to OIDC trusted publishing by @jdx in
[#7607](#7607)
- **(registry)** correct checkmake version test pattern by @jdx in
[#7632](#7632)
- **(release)** handle empty grep result in aqua-registry changelog by
@jdx in
[f45b4c6](f45b4c6)
- **(self-update)** self-update fails across year boundary due to semver
mismatch by @jdx in [#7611](#7611)
- **(tasks)** fix tool inheritance from intermediate parents by @chadxz
in [#7637](#7637)
- add `-test` to VERSION_REGEX prerelease filter by @belgio99 in
[#7647](#7647)

### 📚 Documentation

- **(tasks)** remove documentation for unimplemented features by
@turbocrime in [#7599](#7599)
- update `mise aliases` references to `mise tool-alias` by @muzimuzhi in
[#7615](#7615)
- use call operator in PowerShell profile example by @shina1024 in
[#7639](#7639)
- replace ASCII .pub key with binary .gpg for signed-by on Ubuntu/Debian
by @gmalinowski in [#7649](#7649)

### 🛡️ Security

- **(security)** prevent code execution from untrusted fork in
registry-comment workflow by @jdx in
[4a2441e](4a2441e)

### ◀️ Revert

- Revert "fix(release): handle empty grep result in aqua-registry
changelog" by @jdx in
[522ffdc](522ffdc)
- Revert "chore(release): include manually updated aqua-registry entries
in the changelog " by @jdx in
[1ebb943](1ebb943)

### 📦️ Dependency Updates

- update ghcr.io/jdx/mise:alpine docker digest to fbfffcf by
@renovate[bot] in [#7619](#7619)
- lock file maintenance by @renovate[bot] in
[#7646](#7646)

### 📦 Registry

- add hatoo/oha tool by @jylenhof in
[#7633](#7633)

### Chore

- **(registry)** fix registry comment workflow by @risu729 in
[#7554](#7554)
- **(release)** include manually updated aqua-registry entries in the
changelog by @risu729 in [#7603](#7603)

### New Contributors

- @belgio99 made their first contribution in
[#7647](#7647)
- @gmalinowski made their first contribution in
[#7649](#7649)
- @chadxz made their first contribution in
[#7637](#7637)
- @shina1024 made their first contribution in
[#7639](#7639)
- @jonathanagustin made their first contribution in
[#7638](#7638)
- @turbocrime made their first contribution in
[#7599](#7599)

## 📦 Aqua Registry Updates

#### New Packages (3)

- [`ampcode/zvelte-check`](https://github.com/ampcode/zvelte-check)
- [`nickel-lang/nickel`](https://github.com/nickel-lang/nickel)
- [`openshift/rosa`](https://github.com/openshift/rosa)

PR #7611 fixed the year boundary semver issue by always setting
target_version_tag, but this broke the "already up to date" detection
since the self_update library no longer performs its own version check.

This adds an explicit version comparison before calling update(),
returning Status::UpToDate when versions match (unless --force is set).

Also wraps the blocking HTTP calls in tokio::task::block_in_place()
to fix a panic in debug builds where reqwest::blocking tries to create
a nested tokio runtime.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

## Summary

- Fixes regression from #7611 where `mise self-update` would download
and update even when already at the latest version
- Adds explicit version comparison before calling `update()`, returning
`Status::UpToDate` when versions match (unless `--force` is set)
- Wraps blocking HTTP calls in `tokio::task::block_in_place()` to fix
panic in debug builds

## Root Cause

PR #7611 fixed the year boundary semver issue by always setting
`target_version_tag`, but this bypassed the self_update library's own
"already up to date" detection. The library no longer checks if an
update is needed when a specific target version is set.

## Test plan

- [x] `mise self-update` reports "mise is already up to date" when
current version matches latest
- [x] `mise self-update --force` still downloads and updates
- [x] Debug builds no longer panic due to nested tokio runtime

Fixes: #7589

🤖 Generated with [Claude Code](https://claude.ai/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Prevents unnecessary self-updates and fixes async runtime issues.
> 
> - Adds version comparison before update; returns `Status::UpToDate`
when current `v{cargo_crate_version!()}` matches latest (unless
`--force`)
> - Wraps blocking HTTP in `tokio::task::block_in_place()` via
`do_update` -> `do_update_blocking` split
> - Always sets `update.target_version_tag(&v)` to ensure correct
release selection across semver/year boundaries
> - Keeps plugin auto-update behavior; no-confirm still respects
settings and `--yes`
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
8ca7d9c. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>