Update dependency mise to 2026.6.14

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change	Pending
mise	patch	2026.5.9 → 2026.6.14	2026.7.1 (+1)

---

Release Notes

jdx/mise (mise)

v2026.6.14

Compare Source

🚀 Features

• (bootstrap) add --only flag by @​jdx in #​10607
• (bootstrap) add brew package import and prune by @​jdx in #​10606
• (bootstrap) add aggregate status by @​jdx in #​10608
• (bootstrap) summarize follow-up actions by @​jdx in #​10609
• (bootstrap) add shell activation setup by @​jdx in #​10610
• (bootstrap) add repo checkout by @​jdx in #​10611
• (bootstrap) align cli with config sections by @​jdx in #​10613

🐛 Bug Fixes

• (backend) add riscv64/loongarch64 archs, patterns by @​elerch in #​10506
• (bootstrap) include shell activation in aggregate status by @​jdx in #​10612
• (brew) support binary cask artifacts by @​jdx in #​10604
• (completions) deduplicate plugin names in shell completion by @​zeitlinger in #​10351
• (config) target nearest config dir for TOML writes by @​jdx in #​10603
• (config) avoid idiomatic version file write panic by @​jdx in #​10602
• (config) treat symlinked global config paths as global by @​JamBalaya56562 in #​10597
• (github) return error instead of panic on invalid request url by @​risu729 in #​10591
• (hook-env) suppress repeated untrusted config warnings by @​jdx in #​10589
• (settings) hide empty parent table for nested settings by @​jdx in #​10605
• (sigstore) apply url_replacements to Sigstore TUF root fetch by @​JamBalaya56562 in #​10596
• (which) respect prefer_offline so binary lookup avoids remote fetches by @​JamBalaya56562 in #​10595

📚 Documentation

• add mise song page by @​jdx in #​10614

New Contributors

• @​elerch made their first contribution in #​10506

📦 Aqua Registry Updates

New Packages (1)

• VirusTotal/vt-cli

Updated Packages (2)

• mr-karan/doggo
• nao1215/gup

v2026.6.13

Compare Source

🚀 Features

• (bootstrap) support brew cask pkg artifacts by @​jdx in #​10587

🐛 Bug Fixes

• (aqua) allow verified checksum algorithm upgrades by @​jdx in #​10569
• (aqua) don't cache transient filesystem state in list_bin_paths by @​devnulled in #​10559
• (aqua) require config for attestation badge by @​jdx in #​10588
• (file) support Windows plugin symlinks for UNC paths by @​rozsazoltan in #​10566
• (gem) opt out of --locked URL check by @​itochan in #​10578
• (lock) fail when active tools cannot resolve by @​jdx in #​10586
• (node) suppress npm update notices by @​risu729 in #​10557
• (node) save source lock outcomes by @​risu729 in #​10547
• (oci) write long symlink targets via GNU @​LongLink extension by @​JamBalaya56562 in #​10519
• (sigstore) retry transient GitHub attestation API failures by @​afreyermuth98 in #​10482
• (swift) opt out of --locked URL check by @​AllDmeat in #​10575
• (task) avoid remote resolution during task startup by @​jdx in #​10571

📦️ Dependency Updates

• lock file maintenance lockfile maintenance by @​renovate[bot] in #​10560
• In a pub workspace, look for package config in workspace root by @​tjarvstrand in #​10521

📦 Registry

• add checksums for http-backend tools by @​itochan in #​10552
• add lore by @​ggoggam in #​10558

New Contributors

• @​afreyermuth98 made their first contribution in #​10482
• @​AllDmeat made their first contribution in #​10575
• @​rozsazoltan made their first contribution in #​10566

📦 Aqua Registry Updates

New Packages (1)

• masasuzu/clrnd

Updated Packages (2)

• apache/maven
• nao1215/gup

v2026.6.12

Compare Source

🚀 Features

• (bootstrap) add skip controls by @​jdx in #​10497
• (http) resolve cross-platform lock checksums from published metadata by @​itochan in #​10509
• (upgrade) fix tool removal when minimum_release_age is set by @​roele in #​10466

🐛 Bug Fixes

• (aqua) support checksum verification fields by @​risu729 in #​10473
• (backend) resolve dependency executables on Windows by @​risu729 in #​10514
• (env) expand escaped dollar in env shell expansion by @​jdx in #​10511
• (install) rebuild symlinks after partial installs by @​risu729 in #​10470
• (npm) warn when system pnpm/bun may not support minimum_release_age by @​risu729 in #​10491
• (pipx) upgrade shared pip for release age installs by @​risu729 in #​10472
• (pipx) warn for unsupported uv exclude-newer by @​risu729 in #​10510
• (pipx) force pip backend for mise pipx subprocess calls by @​risu729 in #​10513
• (system) drop bare -- from dnf argv (breaks DNF5 install/upgrade) by @​spencergilbert in #​10538
• (task) align duplicate config task precedence by @​risu729 in #​10471
• (task) skip mise configs in task include dirs by @​jdx in #​10500
• (task) error on empty task shell by @​jdx in #​10517
• (task) honor show_full_cmd in the task command header by @​JamBalaya56562 in #​10518
• (vfox) resolve tools=true env path templates against the dependency toolset by @​JamBalaya56562 in #​10481

📚 Documentation

• (dotfiles) make self-managing config first-run safe by @​jdx in #​10494
• (env) remove emoji checkboxes by @​jdx in #​10504
• recommend keeping mise current by @​jdx in #​10505

📦️ Dependency Updates

• bump usage to 3.5.2 by @​jdx in #​10498
• update ghcr.io/jdx/mise:rpm docker digest to b5e0574 by @​renovate[bot] in #​10531
• update ghcr.io/jdx/mise:alpine docker digest to 892c324 by @​renovate[bot] in #​10529
• update jdx/mise-action digest to e6a8b39 by @​renovate[bot] in #​10532
• update rust docker digest to c681116 by @​renovate[bot] in #​10533
• update ubuntu:26.04 docker digest to e153663 by @​renovate[bot] in #​10534
• update ghcr.io/jdx/mise:deb docker digest to 3d636fa by @​renovate[bot] in #​10530
• update dependency esbuild to v0.28.1 by @​renovate[bot] in #​10535
• update ubuntu:26.04 docker digest to 53958ec by @​renovate[bot] in #​10539

📦 Registry

• add aspire (github:microsoft/aspire) by @​davidfowl in #​10520
• add nub by @​colinhacks in #​10544
• add ldc (github:ldc-developers/ldc) by @​slbls in #​10527
• relax checkov test by @​jdx in #​10548

New Contributors

• @​spencergilbert made their first contribution in #​10538
• @​slbls made their first contribution in #​10527
• @​colinhacks made their first contribution in #​10544
• @​davidfowl made their first contribution in #​10520

📦 Aqua Registry Updates

New Packages (2)

• EpicGames/lore
• cdxgen/cdxgen

v2026.6.11

Compare Source

🚀 Features

• (bootstrap) add apk package support by @​jdx in #​10476

🐛 Bug Fixes

• (aqua) render minisign asset templates with package asset by @​risu729 in #​10462
• (aqua) support format overrides by @​risu729 in #​10461
• (deno) parse PowerShell checksum files by @​risu729 in #​10464
• (docs) align removal version of Tera task arguments with the CLI by @​reitzig in #​10453
• (http) include auto strip in cache key by @​risu729 in #​10468
• (install) don't treat http cache symlinks as mise link when resolving lockfile by @​risu729 in #​10463
• (rust) store toolchain options on idiomatic requests by @​risu729 in #​10178
• (shim) don't create extension-less shims in exe mode on Windows by @​JamBalaya56562 in #​10475
• (task) reject bare monorepo task paths by @​jdx in #​10479

🚜 Refactor

• remove os-release and sys-info deps by @​risu729 in #​10465

📚 Documentation

• fix relative duration example for months by @​sisp in #​10193

📦️ Dependency Updates

• lock file maintenance lockfile maintenance by @​renovate[bot] in #​10448
• replace fuzzy matcher by @​risu729 in #​10467

📦 Registry

• added pinniped by @​tony-sol in #​10456

Chore

• (exec) Also pass-through the COLORTERM environment variable by @​sschuberth in #​10451

New Contributors

• @​sschuberth made their first contribution in #​10451
• @​sisp made their first contribution in #​10193

📦 Aqua Registry Updates

New Packages (3)

• Latias94/merman
• bitnami/sealed-secrets
• coder/boo

Updated Packages (1)

• suzuki-shunsuke/ghtkn

v2026.6.10

Compare Source

🚀 Features

• (env) add default fallback shorthand by @​jdx in #​10441

🐛 Bug Fixes

• (backend) enable 7z archives on unix by @​risu729 in #​10434
• (env) drop stale mise install dirs from mise x/run child PATH by @​JamBalaya56562 in #​10422
• (env) expand shell defaults like POSIX by @​jdx in #​10445
• (file) atomically replace symlinks to avoid spurious EEXIST warnings by @​JamBalaya56562 in #​10414
• (shims) guard Windows bash shims against WSL PATH interop by @​JamBalaya56562 in #​10421
• (task) prefer Windows script task siblings by @​jdx in #​10443
• (vfox) apply tools=true env to os.execute install hooks by @​JamBalaya56562 in #​10432

📦️ Dependency Updates

• replace size formatting deps by @​risu729 in #​10438

Chore

• (ci) enable coderabbit for draft prs by @​risu729 in #​10436
• (ci) use shared coderabbit config by @​jdx in #​10442

📦 Aqua Registry Updates

New Packages (1)

• CycloneDX/cdxgen

Updated Packages (2)

• aquaproj/registry-tool
• haskell/ghcup-hs

v2026.6.9

Compare Source

Chore

• (ci) revert idempotent release asset upload by @​jdx in #​10433

📦 Aqua Registry Updates

Updated Packages (10)

• UpCloudLtd/upcloud-cli
• dprint/dprint
• j178/prek
• jdx/hk
• jdx/mise
• jdx/usage
• pnpm/pnpm
• reviewdog/nightly
• suzuki-shunsuke/cmdx
• twpayne/chezmoi

v2026.6.8

Compare Source

🐛 Bug Fixes

• (ruby) require build revision releases by @​jdx in #​10428
• (zig) resolve master channel to the concrete nightly version by @​JamBalaya56562 in #​10423

📚 Documentation

• (css) align social links icons vertically center by @​smasato in #​10424

Chore

• (ci) make release asset upload idempotent by @​jdx in #​10430
• (ci) increase release job timeout by @​jdx in #​10431
• silence platform-conditional dead-code warnings by @​JamBalaya56562 in #​10425

New Contributors

• @​smasato made their first contribution in #​10424

📦 Aqua Registry Updates

New Packages (1)

• fallow-rs/fallow

v2026.6.7

Compare Source

🚀 Features

• (backend) add pkgx backend by @​jdx in #​10408
• (bootstrap) add launchd agents by @​jdx in #​10396
• (bootstrap) add phase hooks by @​jdx in #​10395
• (bootstrap) add friendly macos defaults by @​jdx in #​10398
• (bootstrap) add mas package manager by @​jdx in #​10397
• (bootstrap) add systemd user units by @​jdx in #​10399
• (file) support tbz extraction format alias by @​risu729 in #​10403

🐛 Bug Fixes

• (activate) don't reorder PATH for the mise dir in --shims mode by @​JamBalaya56562 in #​10394
• (aqua) strip aqua asset formats from AssetWithoutExt by @​risu729 in #​10104
• (aqua) reject unsupported package formats by @​risu729 in #​10409
• (bootstrap) scope forced dotfile conflicts by @​jdx in #​10410
• (dotnet) send semVerLevel=2.0.0 in NuGet search query by @​JamBalaya56562 in #​10384
• (erlang) record lockfile fallback mode by @​risu729 in #​10239
• (github) strip tool name before asset platform detection by @​JamBalaya56562 in #​10390
• (github) only strip the tool name at a token boundary in asset matching by @​JamBalaya56562 in #​10391
• (github,forgejo) paginate past an all-prerelease first page of releases by @​JamBalaya56562 in #​10420
• (install) detect busybox tar so zstd tarballs are not mis-extracted by @​JamBalaya56562 in #​10385
• (install) run tool postinstall against the just-installed version by @​JamBalaya56562 in #​10415
• (plugins) prompt before installing non-registry plugin URLs by @​risu729 in #​10402
• (task) join wrapped command lines in task output header by @​JamBalaya56562 in #​10387
• (task) prefer exact task name over extension-stripped match by @​JamBalaya56562 in #​10393
• (watch) forward --wrap-process to watchexec by @​JamBalaya56562 in #​10392

🚜 Refactor

• (aqua) stop canonicalizing archive format aliases by @​risu729 in #​10404
• (file) rename TarFormat to ExtractionFormat by @​risu729 in #​10275
• (file) derive extraction format extensions from display by @​risu729 in #​10412
• (file) return option from extraction format parsing by @​risu729 in #​10411

📚 Documentation

• (ruby) document precompiled build revisions by @​jdx in #​10419

📦 Registry

• scope imagemagick aqua backend to windows-x64 by @​risu729 in #​10400
• add SQLcl (aqua:oracle.com/sqlcl) by @​jasonlyle88 in #​10417

Chore

• update mise.lock by @​JamBalaya56562 in #​10418

New Contributors

• @​jasonlyle88 made their first contribution in #​10417

v2026.6.6

Compare Source

🚀 Features

• (bootstrap) add dotfiles workflow by @​jdx in #​10376
• (bootstrap) support brew taps and casks directly by @​jdx in #​10383
• (config) load safe mise.toml files without trust by @​jdx in #​10360
• (oci) apply system files and apt packages by @​jdx in #​10373
• (system) add [system.defaults] for declarative macOS defaults by @​jdx in #​10363
• (system) build source formulae from source with a native formula DSL shim by @​jdx in #​10364
• (system) support wildcards in system files by @​jdx in #​10374
• (system) support custom brew taps by @​jdx in #​10375
• (system) add login shell bootstrap support by @​jdx in #​10377
• add mise bootstrap and declarative [system.files] by @​jdx in #​10365
• add [system.edits] for editing files mise doesn't own by @​jdx in #​10368

🐛 Bug Fixes

• (http) show github 403 response diagnostics by @​jdx in #​10382

🚜 Refactor

• (file) split extraction helpers and harden format handling by @​risu729 in #​10274

📚 Documentation

• (settings) document 24h default for minimum_release_age by @​ThijsdeJong-TomTom in #​10366
• link to all sponsors by @​jdx in #​10369
• add more tips and tricks entries by @​jdx in #​10370
• clarify contribution fit by @​jdx in #​10378
• make contributing guide canonical by @​jdx in #​10380

⚡ Performance

• (versions-host) fetch version lists from static assets by @​jdx in #​10361

Chore

• graduate stable features from experimental by @​jdx in #​10371
• remove stale cargo-deny advisory ignores by @​jdx in #​10372

New Contributors

• @​ThijsdeJong-TomTom made their first contribution in #​10366

📦 Aqua Registry Updates

Updated Packages (5)

• oracle.com/sqlcl
• oxc-project/oxc/oxlint
• suzuki-shunsuke/docfresh
• suzuki-shunsuke/ghaperf
• suzuki-shunsuke/ghir

v2026.6.5

Compare Source

🐛 Bug Fixes

• (aqua) support GitHub attestation predicate fields by @​risu729 in #​10169
• (aqua) canonicalize and reject duplicate vars by @​risu729 in #​10187
• (config) ignore local credential commands by @​jdx in #​10356
• (config) ignore local trust controls by @​jdx in #​10357
• (schema) forbid task-only bool fields on task templates by @​risu729 in #​10242
• (schema) allow registry backend platform selectors by @​risu729 in #​10358
• (task) require trust for config-less task includes by @​jdx in #​10355

🧪 Testing

• (windows) restore github token env in e2e by @​jdx in #​10359

📦️ Dependency Updates

• update ghcr.io/jdx/mise:deb docker digest to 5b1ef5e by @​renovate[bot] in #​10349
• update ghcr.io/jdx/mise:alpine docker digest to 1218930 by @​renovate[bot] in #​10348
• update ghcr.io/jdx/mise:rpm docker digest to 5907998 by @​renovate[bot] in #​10350

Chore

• (ci) bump pr-closer action by @​jdx in #​10354

v2026.6.4

Compare Source

🚀 Features

• (github) add matching and matching_regex asset options by @​devnulled in #​10325
• (oci) add configurable layer owner by @​ThomasK33 in #​10075
• (system) declarative system packages (apt, dnf, pacman, and brew without brew) by @​jdx in #​10326
• (system) add mise system use and mise system upgrade by @​jdx in #​10346

🐛 Bug Fixes

• (aqua) support override env selectors by @​risu729 in #​10200
• (aqua) route versions host by registry repo by @​jdx in #​10341
• (backend) honor zero minimum release age flag by @​jdx in #​10344
• (core) preserve inner quotes for remaining cmd /c call sites on windows by @​JamBalaya56562 in #​10323
• (dotnet) include runtime in lock identity by @​risu729 in #​10175
• (install) skip inactive unknown tools by @​risu729 in #​10206
• (java) include shorthand vendor in lock identity by @​risu729 in #​9989
• (task) append forwarded args to inline bash -c tasks on windows by @​JamBalaya56562 in #​10321
• (task) validate monorepo-relative task refs by @​jdx in #​10342
• (task) show multiline descriptions in usage help by @​risu729 in #​10204
• (tasks) refactor editor command handling and improve error reporting by @​roele in #​9752

🧪 Testing

• (completions) update usage 3.5 expectations by @​jdx in #​10340
• (use) cover quiet global use output by @​risu729 in #​10199

📦️ Dependency Updates

• update ghcr.io/jdx/mise:alpine docker digest to 1248f2a by @​renovate[bot] in #​10331
• update rust crate tabled to 0.21 by @​renovate[bot] in #​10337
• update rattler by @​renovate[bot] in #​10336
• update actions/checkout action to v6.0.3 by @​renovate[bot] in #​10335
• update ghcr.io/jdx/mise:deb docker digest to 50edf9f by @​renovate[bot] in #​10332
• update rust docker digest to 4fd8406 by @​renovate[bot] in #​10334
• update ghcr.io/jdx/mise:rpm docker digest to 57866e0 by @​renovate[bot] in #​10333

📦 Registry

• add ghtkn by @​TyceHerrman in #​9967
• add antigravity-cli by @​rhanneken in #​10324

New Contributors

• @​ThomasK33 made their first contribution in #​10075
• @​devnulled made their first contribution in #​10325

v2026.6.3

Compare Source

🚀 Features

• (backend) allow version_expr to post-process version_regex results by @​konono in #​10302
• (config) automatically define platform environments (auto_env) by @​jdx in #​10316
• (deps) add support for Deno by @​felipecrs in #​10291
• (github) add --refresh flag to mint a fresh OAuth token by @​jdx in #​10317

🐛 Bug Fixes

• (backend) respect permissive minimum release age by @​jdx in #​10310
• (completions) require usage 3.5 by @​jdx in #​10313
• (config) default release age cutoff should not disable installed-version resolution by @​jdx in #​10315
• (lock) lock idiomatic version file tools by @​jdx in #​10309
• (lock) disambiguate idiomatic lock target by @​jdx in #​10319
• (python) honor minimum release age for core versions by @​jdx in #​10311
• (registry) rename podman gh organization by @​TyceHerrman in #​10288
• (task) preserve inner quotes for cmd /c tasks and hooks on windows by @​JamBalaya56562 in #​10301
• (task) resolve templates in included task files by @​jdx in #​10312
• retry rename on Windows transient file locks during install by @​jhult in #​10300

📦 Registry

• add imagemagick (aqua:ImageMagick/ImageMagick) by @​thernstig in #​10118
• add vscode-cli (backend:aqua:microsoft/vscode/code) by @​felipecrs in #​10314

New Contributors

• @​felipecrs made their first contribution in #​10314
• @​jhult made their first contribution in #​10300

📦 Aqua Registry Updates

Updated Packages (2)

• SonarSource/sonarqube-cli
• ubugeeei-prod/vize

v2026.6.2

Compare Source

🚀 Features

• (config) add minimum release age excludes by @​jdx in #​10277
• (config) default release age and warn on hidden versions by @​jdx in #​10279

🐛 Bug Fixes

• (github) skip versions host for non-registry attestations by @​jdx in #​10260
• (npm) warn when install hooks are skipped by @​jdx in #​10280

📚 Documentation

• (security) clarify minimum release age support by @​jdx in #​10278
• (settings) prefer assignment form for set examples by @​jdx in #​10271
• On Debian/Ubuntu, use extrepo for installing by @​okulev in #​10262
• improve sponsor logo contrast by @​jdx in #​10270

🧪 Testing

• (aqua) allow commit metadata refs by @​jdx in #​10287

📦️ Dependency Updates

• lock file maintenance lockfile maintenance by @​renovate[bot] in #​10265

📦 Registry

• add cargo-msrv by @​jdx in #​10276
• update aube and pitchfork aqua entries by @​jdx in #​10285

Chore

• (ci) ignore RUSTSEC-2026-0173 proc-macro-error2 advisory by @​risu729 in #​10269
• (release) validate vendored aqua registry by @​jdx in #​10286

New Contributors

• @​okulev made their first contribution in #​10262

📦 Aqua Registry Updates

New Packages (10)

• alibaba/open-code-review
• grafana-cold-storage/grizzly
• hashicorp/hcl/hclfmt
• jdx/aube
• jdx/pitchfork
• klauspost/asmfmt
• lexfrei/claudeline
• macstadium.com/orka3
• openai/tart
• visioncortex/vtracer

Updated Packages (2)

• FiloSottile/age
• GitGuardian/ggshield

v2026.6.1

Compare Source

🚀 Features

• (bootstrap) add apk package support by @​jdx in #​10476

🐛 Bug Fixes

• (aqua) render minisign asset templates with package asset by @​risu729 in #​10462
• (aqua) support format overrides by @​risu729 in #​10461
• (deno) parse PowerShell checksum files by @​risu729 in #​10464
• (docs) align removal version of Tera task arguments with the CLI by @​reitzig in #​10453
• (http) include auto strip in cache key by @​risu729 in #​10468
• (install) don't treat http cache symlinks as mise link when resolving lockfile by @​risu729 in #​10463
• (rust) store toolchain options on idiomatic requests by @​risu729 in #​10178
• (shim) don't create extension-less shims in exe mode on Windows by @​JamBalaya56562 in #​10475
• (task) reject bare monorepo task paths by @​jdx in #​10479

🚜 Refactor

• remove os-release and sys-info deps by @​risu729 in #​10465

📚 Documentation

• fix relative duration example for months by @​sisp in #​10193

📦️ Dependency Updates

• lock file maintenance lockfile maintenance by @​renovate[bot] in #​10448
• replace fuzzy matcher by @​risu729 in #​10467

📦 Registry

• added pinniped by @​tony-sol in #​10456

Chore

• (exec) Also pass-through the COLORTERM environment variable by @​sschuberth in #​10451

New Contributors

• @​sschuberth made their first contribution in #​10451
• @​sisp made their first contribution in #​10193

📦 Aqua Registry Updates

New Packages (3)

• Latias94/merman
• bitnami/sealed-secrets
• coder/boo

Updated Packages (1)

• suzuki-shunsuke/ghtkn

v2026.6.0

Compare Source

🚀 Features

• (npm) ensure npm is managed by corepack when node.corepack=true and node.npm_shim=false by @​roele in #​10196

🐛 Bug Fixes

• (aqua) mirror aqua windows extension semantics by @​risu729 in #​10167
• (bun) improve musl detection logic using runtime detection by @​roele in #​10195
• (completion) rely on usage#649 for global flags, keep -r/-S promotion by @​JamBalaya56562 in #​10176
• (spm) track artifact bundle options in lock identity by @​risu729 in #​10160
• (task) honor task_config.includes order so a local task can override a git::include by @​vmaleze in #​10191
• (task) honor MISE_CYGDRIVE_PREFIX for Git Bash, not only Cygwin by @​JamBalaya56562 in #​10190

📚 Documentation

• Fix example syntax for choice function in templates by [@​joekrill](https://redirect.g

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "after 7am every weekday,before 8pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'pre-commit autoupdate --freeze || true' has not been added to the allowed list in allowedCommands

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: BUILD-11436

[sonar-review-alpha]

Summary

Patch update of the mise tool from 2026.5.9 to 2026.5.10 across CI configuration files. The bump includes a bug fix for SSO-based AWS S3 profiles, a refactor of tool option parsing, and upstream dependency updates. Six files are updated with the new version number (workflow definitions and action.yml files).

What reviewers should know

Where to look: The changes are uniform version bumps in .github/workflows/ and action files (build-npm, build-poetry, build-yarn, promote). No logic changes.

Verification: Ensure the version is consistently updated across all 6 files and matches what's in the PR description (2026.5.10). The mise-action pinned reference (v4.0.1) remains unchanged.

Note: A newer version (2026.5.12) is available per the PR description if a follow-up update is desired.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[sonar-review-alpha]

Clean version bump, but one file that also uses mise-action was not included: config-npm/action.yml still pins version: 2026.3.7, far behind the 2026.5.10 used everywhere else. This may be intentional (the action has a special backup/restore pattern for mise files and may be managed separately), but it's worth confirming — if it's meant to track the same version, it should be included in this update.

🗣️ Give feedback

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud