Skip to content

chore: release 2026.4.9#9000

Merged
mise-en-dev merged 1 commit intomainfrom
release
Apr 11, 2026
Merged

chore: release 2026.4.9#9000
mise-en-dev merged 1 commit intomainfrom
release

Conversation

@mise-en-dev
Copy link
Copy Markdown
Collaborator

@mise-en-dev mise-en-dev commented Apr 10, 2026 •
edited
Loading

🐛 Bug Fixes

  • (docs) upgrade esbuild to 0.28.0 with es2022 build target by @jdx in #9047
  • (env) skip tools=true module hooks in dependency_env by @jdx in #9011
  • (lockfile) resolve SLSA provenance URLs deterministically for all platforms by @cameronbrill in #8982
  • (registry) test of docuum in registry by @jylenhof in #8996
  • (release) publish extracted mise.exe alongside Windows zip by @zeitlinger in #8997
  • (schema) add missing config fields by @risu729 in #9044
  • (task) support sandbox fields in task templates by @risu729 in #9046
  • (tasks) respect env precedence for task config by @risu729 in #9039
  • prevent implicit enabling of self_update when rustls features are enabled by @salim-b in #9040
  • allow installing bun and others when downloads folder is on a different mount by @bgeron in #9032

📚 Documentation

  • discourage direnv compatibility PRs and remove issue suggestions by @jdx in ca78346
  • tighten direnv compatibility language by @jdx in ab140c8
  • add Tera tip for unsupported version files by @risu729 in #9048

📦️ Dependency Updates

📦 Registry

  • remove broken tool tests by @jdx in #9017
  • update granted aqua backend repo by @risu729 in #9033
  • fix atlas-community test expected output by @jdx in #9054

Chore

  • use deprecated_at! macro for ubi backend deprecation by @jdx in #9049

Security

  • (ci) run test-tool inside Docker container by @jdx in #9055
  • (ci) avoid exposing MISE_GH_TOKEN to test-tool scripts by @jdx in #9053

New Contributors

📦 Aqua Registry Updates

Updated Packages (2)

@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Apr 10, 2026 •
edited
Loading

Greptile Summary

This is a standard release PR bumping mise from 2026.4.8 to 2026.4.9, with coordinated version updates across Cargo.toml, Cargo.lock, default.nix, snapcraft.yaml, packaging/rpm/mise.spec, completion scripts, and the aqua-registry crate (2026.4.2 → 2026.4.3). The substantive changes are in the aqua registry YAML files (gleam and kubectl-cnpg version constraint overrides) and the mise.lock SLSA provenance format, which now stores an explicit URL instead of the generic string \"slsa\".

Confidence Score: 5/5

Standard release PR with well-scoped version bumps and intentional registry overhaul; safe to merge.

All changes are either mechanical version-string bumps (Cargo.toml, lock, completions, packaging files) or deliberate registry YAML updates with clear intent per the linked PRs. The gleam sha512→sha256 switch aligns with what gleam actually publishes. The kubectl-cnpg v1.27.4 carve-out is unusual but consistent with the SLSA determinism fix. No logic regressions or security concerns found.

gleam/registry.yaml and kubectl-cnpg/registry.yaml deserve a second glance if SLSA verification failures are reported downstream.

Important Files Changed

Filename Overview
Cargo.toml Version bump 2026.4.8 → 2026.4.9; consistent with Cargo.lock.
Cargo.lock Both mise (2026.4.8→2026.4.9) and aqua-registry (2026.4.2→2026.4.3) lock entries updated to match their respective Cargo.toml files.
crates/aqua-registry/aqua-registry/pkgs/gleam-lang/gleam/registry.yaml Major overhaul adding historical version-range constraints; checksum algorithm changed from sha512 to sha256 for versions ≥0.23.0, which aligns with what gleam actually publishes but differs from the previous config.
crates/aqua-registry/aqua-registry/pkgs/cloudnative-pg/cloudnative-pg/kubectl-cnpg/registry.yaml Adds version-specific SLSA overrides: v1.27.4 gets SLSA provenance, the ≤1.28.1 range does not, and "true" (latest) does — an unusual pattern but plausible given release history.
mise.lock SLSA provenance for sops updated from the generic string provenance = "slsa" to an explicit URL table; consistent with the deterministic SLSA URL fix in #8982.
CHANGELOG.md Release notes for 2026.4.9 prepended; entries match PR description and contributor list.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[kubectl-cnpg version lookup] --> B{Version == v1.27.4?}
    B -- Yes --> C[Use config WITH SLSA\nmultiple.intoto.jsonl]
    B -- No --> D{semver <= 1.28.1?}
    D -- Yes --> E[Use config\nNO SLSA provenance]
    D -- No --> F[Default 'true'\nUse config WITH SLSA\nmultiple.intoto.jsonl]

    G[gleam version lookup] --> H{Version == v0.12.0-rc3\nor v1.3.0-rc1?}
    H -- Yes --> I[Exact-match\nlegacy config]
    H -- No --> J{semver range cascade\n<= 0.6.0 / <=0.18.x\n/ <=0.22.1 / <=1.9.1\n/ <=1.10.0}
    J -- Matched --> K[Range-specific config\nsha256 checksum]
    J -- No match --> L[Default 'true'\nsha256 + GitHub\nartifact attestations]
Loading

Reviews (41): Last reviewed commit: "chore: release 2026.4.9" | Re-trigger Greptile

gemini-code-assist[bot]
gemini-code-assist Bot reviewed Apr 10, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request increments the version of mise from 2026.4.8 to 2026.4.9 across the project, including the changelog, cargo manifests, documentation, shell completions, and packaging configurations. I have no feedback to provide.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 10, 2026 •
edited
Loading

Hyperfine Performance

mise x -- echo

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.8 x -- echo 25.7 ± 0.5 24.4 29.1 1.00
mise x -- echo 26.4 ± 0.7 24.9 32.5 1.03 ± 0.03

mise env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.8 env 25.4 ± 1.0 23.7 39.5 1.00
mise env 25.8 ± 0.5 24.2 28.2 1.01 ± 0.05

mise hook-env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.8 hook-env 26.0 ± 0.4 24.7 27.3 1.00
mise hook-env 26.6 ± 0.5 25.2 30.5 1.02 ± 0.03

mise ls

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.8 ls 23.3 ± 0.9 21.8 36.9 1.00
mise ls 23.8 ± 0.5 22.3 25.2 1.02 ± 0.05

xtasks/test/perf

Command mise-2026.4.8 mise Variance
install (cached) 157ms 157ms +0%
ls (cached) 83ms 82ms +1%
bin-paths (cached) 88ms 87ms +1%
task-ls (cached) 801ms 798ms +0%

@mise-en-dev mise-en-dev force-pushed the release branch 21 times, most recently from 9a6ea39 to 76b461b Compare April 11, 2026 00:21
@mise-en-dev mise-en-dev enabled auto-merge (squash) April 11, 2026 10:16
@mise-en-dev mise-en-dev force-pushed the release branch 3 times, most recently from 59ea85e to a2a8e17 Compare April 11, 2026 13:14
@mise-en-dev mise-en-dev force-pushed the release branch 14 times, most recently from d198626 to da8ab27 Compare April 11, 2026 18:39
@mise-en-dev mise-en-dev merged commit fd18426 into main Apr 11, 2026
64 checks passed
@mise-en-dev mise-en-dev deleted the release branch April 11, 2026 20:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

release

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mise-en-dev