Trying to build an app that uses node fails because of bad keys. You have to set MISE_NODE_VERIFY=false to get it to work
=> ERROR install mise packages: node 2.7s
------
> install mise packages: node:
0.121 mise trusted /app
0.409 mise node@22.18.0 install
0.412 mise node@22.18.0 download node-v22.18.0-linux-x64.tar.gz
2.667 gpg: Signature made Thu Jul 31 21:47:23 2025 UTC
2.667 gpg: using EDDSA key 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356
2.668 gpg: Can't check signature: No public key
2.669 mise ERROR gpg failed
2.669 gpg: Signature made Thu Jul 31 21:47:23 2025 UTC
2.669 gpg: using EDDSA key 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356
2.669 gpg: Can't check signature: No public key
2.673 mise ERROR failed to install core:node@22.18.0
2.673 mise ERROR gpg exited with non-zero status: exit code 2
2.673 mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information
------
ERROR: failed to solve: process "sh -c mise trust -a && mise install" did not complete successfully: exit code: 1
and
➜ mise install --verbose
DEBUG ARGS: mise install --verbose
DEBUG config: ~/Downloads/df_demo/mise.toml
DEBUG config: ~/.config/mise/config.toml
DEBUG install_some_versions: node@22.18.0
INFO node@22.18.0 install
INFO node@22.18.0 download node-v22.18.0-darwin-arm64.tar.gz
DEBUG GET Downloading https://nodejs.org/dist/v22.18.0/node-v22.18.0-darwin-arm64.tar.gz to ~/.local/share/mise/downloads/node/22.18.0/node-v22.18.0-darwin-arm64.tar.gz
DEBUG GET https://nodejs.org/dist/v22.18.0/node-v22.18.0-darwin-arm64.tar.gz
DEBUG starting new connection: https://nodejs.org/
DEBUG GET https://nodejs.org/dist/v22.18.0/node-v22.18.0-darwin-arm64.tar.gz 200 OK
DEBUG GET Downloading https://nodejs.org/dist/v22.18.0/SHASUMS256.txt to ~/.local/share/mise/downloads/node/22.18.0/SHASUMS256.txt
DEBUG GET https://nodejs.org/dist/v22.18.0/SHASUMS256.txt
DEBUG GET https://nodejs.org/dist/v22.18.0/SHASUMS256.txt 200 OK
DEBUG GET Downloading https://nodejs.org/dist/v22.18.0/SHASUMS256.txt.sig to ~/.local/share/mise/downloads/node/22.18.0/SHASUMS256.asc
DEBUG GET https://nodejs.org/dist/v22.18.0/SHASUMS256.txt.sig
DEBUG GET https://nodejs.org/dist/v22.18.0/SHASUMS256.txt.sig 200 OK
DEBUG $ gpg --quiet --import
DEBUG $ gpg --quiet --trust-model always --verify /Users/nickpapciak/.local/share/mise/downloads/node/22.18.0/SHASUMS256.asc /Users/nickpapciak/.local/share/mise/downloads/node/22.18.0/SHASUMS256.txt
gpg: Signature made Thu Jul 31 14:47:23 2025 PDT
gpg: using EDDSA key 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356
gpg: Can't check signature: No public key
ERROR gpg failed
Error:
0: failed to install core:node@22.18.0
1: gpg exited with non-zero status: exit code 2
Location:
src/cmd.rs:479
Version:
2025.7.0 macos-arm64 (2025-07-01)
Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.
Trying to build an app that uses node fails because of bad keys. You have to set
MISE_NODE_VERIFY=falseto get it to workand