Skip to content

chore: release 2026.4.12#9080

Merged
mise-en-dev merged 1 commit intomainfrom
release
Apr 15, 2026
Merged

chore: release 2026.4.12#9080
mise-en-dev merged 1 commit intomainfrom
release

Conversation

@mise-en-dev
Copy link
Copy Markdown
Collaborator

@mise-en-dev mise-en-dev commented Apr 14, 2026

🚀 Features

  • (npm) use --min-release-age for npm 11.10.0+ supply chain protection by @webkaz in #9072
  • (registry) add openfga by @mnm364 in #9084
  • (task) allow to set confirmation default by @roele in #9089
  • support os/arch compound syntax in tool os filtering by @RobertDeRose in #9088

🐛 Bug Fixes

  • (activate) export __MISE_EXE and resolve bare ARGV0 to absolute path by @fru1tworld in #9081
  • (install) support aliased installs sharing a backend by @jdx in #9093
  • (shim) use which_no_shims when resolving mise binary in reshim and doctor by @kevinswiber in #9071
  • filter empty segments in colon-separated env var parsing by @baby-joel in #9076

📚 Documentation

  • fix wrong file reference to forgejo backend implemenation by @roele in #9090
  • fix cli token command for token resolution by @roele in #9077

📦 Registry

Chore

New Contributors

📦 Aqua Registry Updates

New Packages (7)

Updated Packages (3)

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates mise to version 2026.4.12 and the aqua-registry to 2026.4.4, adding new package definitions for IBM Cloud CLI, hif, pgschema, and trzsz-go. Feedback was provided to improve the mvdan/sh registry configuration by removing redundant version overrides, adding missing checksums for security, and correcting architecture replacements for older versions.

Comment on lines +11 to +50
- version_constraint: Version == "v3.6.0"
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
format: raw
windows_arm_emulation: true
checksum:
type: github_release
asset: sha256sums.txt
algorithm: sha256
- version_constraint: Version == "v3.7.0"
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
format: raw
windows_arm_emulation: true
- version_constraint: semver("<= 3.1.2")
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
supported_envs:
- darwin
- linux
- amd64
files:
- name: shfmt
- version_constraint: semver("<= 3.12.0")
format: raw
rosetta2: true
windows_arm_emulation: true
replacements:
arm64: arm
- version_constraint: semver("<= 3.2.2")
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
supported_envs:
- darwin
- linux
- amd64
files:
- name: shfmt
format: raw
rosetta2: true
windows_arm_emulation: true
- version_constraint: semver("<= 3.5.1")
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
format: raw
windows_arm_emulation: true
- version_constraint: semver("<= 3.12.0")
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
format: raw
windows_arm_emulation: true
checksum:
type: github_release
asset: sha256sums.txt
algorithm: sha256
- version_constraint: "true"
format: raw
asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
supported_envs:
- darwin
- linux
- amd64
files:
- name: shfmt
format: raw
windows_arm_emulation: true
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The version_overrides for mvdan/sh can be simplified and improved for security and compatibility:

  1. Redundancy: The specific overrides for v3.6.0 and v3.7.0 (lines 11-22) are unnecessary as they match the same configuration as the semver("<= 3.12.0") block. Removing them ensures v3.7.0 also gets checksum verification.
  2. Security: The "true" block (lines 47-50) is missing a checksum definition. Adding it ensures that future versions (e.g., v3.13.0) are verified against the sha256sums.txt asset provided by the maintainer.
  3. Compatibility: The arm64: arm replacement should cover up to v3.3.1, as native arm64 binaries were only introduced in v3.4.0. Versions v3.2.x and v3.3.x still use the arm suffix for Linux binaries.
      - version_constraint: semver("<= 3.3.1")
        asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
        format: raw
        rosetta2: true
        windows_arm_emulation: true
        replacements:
          arm64: arm
      - version_constraint: semver("<= 3.5.1")
        asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
        format: raw
        windows_arm_emulation: true
      - version_constraint: semver("<= 3.12.0")
        asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
        format: raw
        windows_arm_emulation: true
        checksum:
          type: github_release
          asset: sha256sums.txt
          algorithm: sha256
      - version_constraint: "true"
        asset: shfmt_{{.Version}}_{{.OS}}_{{.Arch}}
        format: raw
        windows_arm_emulation: true
        checksum:
          type: github_release
          asset: sha256sums.txt
          algorithm: sha256

@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented Apr 14, 2026

Greptile Summary

This is a standard release PR bumping mise to version 2026.4.12, updating the changelog, version numbers across packaging files, shell completion spec references, and the aqua-registry crate. It also adds seven new aqua registry packages and updates three existing ones (mvdan/sh, rvben/rumdl, temporalio/temporal).

Confidence Score: 5/5

Safe to merge — standard release PR with clean version bumps, correct CHANGELOG, and well-structured aqua registry additions.

All changes are mechanical release-infrastructure updates (version bumps across Cargo.toml, packaging specs, completion scripts) plus aqua registry YAML additions that follow established patterns. The temporal registry intentionally removes the deprecated tctl binary in line with upstream deprecation. No logic-bearing Rust source files were changed in this PR.

No files require special attention.

Important Files Changed

Filename Overview
Cargo.toml Version bumped from 2026.4.11 to 2026.4.12 — standard release change.
CHANGELOG.md New 2026.4.12 section added correctly matching the PR description and linked PRs.
crates/aqua-registry/aqua-registry/pkgs/temporalio/temporal/registry.yaml Replaces old single-config (providing tctl) with versioned overrides providing server binaries; tctl is no longer exposed, which is a breaking change for existing users of that package.
crates/aqua-registry/aqua-registry/pkgs/mvdan/sh/registry.yaml Expands version constraints to cover fine-grained historical shfmt releases; removes overly-restrictive supported_envs for older versions.
crates/aqua-registry/aqua-registry/pkgs/IBM-Cloud/ibm-cloud-cli-release/registry.yaml New package entry for IBM Cloud CLI with correct CDN URL patterns and version-split for the ibm-cloud-cli-dn path change at v2.38.0.
crates/aqua-registry/aqua-registry/pkgs/trzsz/trzsz-go/registry.yaml New package providing trz/tsz/trzsz binaries with correct historical version constraints and checksum verification on latest builds.
crates/aqua-registry/aqua-registry/pkgs/micelio.dev/hif/registry.yaml New http-type package without repo_owner/repo_name; lacks a version_source, so aqua cannot auto-discover versions — relies on external version listing.
crates/aqua-registry/aqua-registry/pkgs/rvben/rumdl/registry.yaml Adds version constraint for <= 0.1.68 and adds GitHub artifact attestations for the latest build.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Install aqua:temporalio/temporal@VERSION] --> B{semver <= 1.30.1?}
    B -- Yes --> C[Asset: temporal_VERSION_OS_ARCH.tar.gz\nFiles: temporal-server\ntemporal-cassandra-tool\ntemporal-sql-tool\nChecksum: checksums.txt]
    B -- No --> D[Asset: temporal_VERSION_OS_ARCH.tar.gz\nFiles: temporal-server\ntemporal-cassandra-tool\ntemporal-sql-tool\ntemporal-elasticsearch-tool\ntdbg\nChecksum: checksums.txt]
    C --> E{Windows?}
    D --> E
    E -- Yes --> F[Override format: zip]
    E -- No --> G[Use tar.gz]
Loading

Reviews (11): Last reviewed commit: "chore: release 2026.4.12" | Re-trigger Greptile

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 14, 2026

Hyperfine Performance

mise x -- echo

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.11 x -- echo 22.3 ± 0.7 21.2 33.2 1.00
mise x -- echo 22.7 ± 0.4 21.9 24.1 1.02 ± 0.04

mise env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.11 env 21.7 ± 1.0 20.8 34.1 1.00
mise env 22.2 ± 0.5 21.3 26.4 1.02 ± 0.05

mise hook-env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.11 hook-env 22.3 ± 0.9 21.6 35.6 1.00
mise hook-env 23.0 ± 0.6 22.0 28.0 1.03 ± 0.05

mise ls

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.4.11 ls 19.7 ± 0.4 19.0 21.4 1.00
mise ls 20.4 ± 0.4 19.6 22.2 1.04 ± 0.03

xtasks/test/perf

Command mise-2026.4.11 mise Variance
install (cached) 150ms 147ms +2%
ls (cached) 77ms 77ms +0%
bin-paths (cached) 82ms 81ms +1%
task-ls (cached) 791ms 790ms +0%

@mise-en-dev mise-en-dev force-pushed the release branch 9 times, most recently from f4a44cd to 4493607 Compare April 15, 2026 00:49
@mise-en-dev mise-en-dev merged commit e13f5bd into main Apr 15, 2026
63 checks passed
@mise-en-dev mise-en-dev deleted the release branch April 15, 2026 10:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant