Skip to content

chore: release 2026.3.6#8509

Merged
jdx merged 1 commit intomainfrom
release
Mar 9, 2026
Merged

chore: release 2026.3.6#8509
jdx merged 1 commit intomainfrom
release

Conversation

@mise-en-dev
Copy link
Copy Markdown
Collaborator

@mise-en-dev mise-en-dev commented Mar 8, 2026

🐛 Bug Fixes

  • (activate) reorder shims to front of PATH on re-source in fish by @jdx in #8534
  • (backend) strip mise shims from dependency_env PATH to prevent fork bomb by @pose in #8475
  • (github) resolve "latest" version correctly via GitHub API by @jdx in #8532
  • (lock) set env tags and clarify lockfile docs by @jdx in #8519
  • (lock) use separate mise..lock files instead of env tags by @jdx in #8523
  • (task) include args in task output prefix and truncate long prefixes by @jdx in #8533
  • (task) only include args in task prefix when disambiguating duplicates by @jdx in #8536
  • (test) pin goreleaser version in attestation e2e test by @jdx in #8518
  • (windows) env._.source needs to run bash.exe on Windows (fix Cannot use `_.source` on windows #6513) by @pjeby in #8520
  • handle locked .exe shims on Windows during reshim by @davireis in #8517

🚜 Refactor

  • (prepare) remove touch_outputs and update docs to reflect blake3 hashing by @jdx in #8535

📚 Documentation

  • (docker) replace jdxcode/mise image with curl install, update to debian:13-slim by @jdx in #8526
  • fix "gzip: stdin is encrypted" error in shell tricks cookbook by @pjeby in #8512

📦 Registry

New Contributors

📦 Aqua Registry Updates

New Packages (6)

Updated Packages (1)

@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a routine release of mise version 2026.3.6. This release includes an update to the aqua-registry and the integration of two new tools, majorcontext/moat and sudorandom/fauxrpc, expanding the available package ecosystem for users.

Highlights

  • New Release Version: The mise tool has been released as version 2026.3.6.
  • Aqua Registry Update: The aqua-registry package has been updated to version 2026.3.3.
  • New Aqua Packages: Two new packages, majorcontext/moat and sudorandom/fauxrpc, have been added to the Aqua Registry.
Changelog
  • CHANGELOG.md
    • Added a new entry for version 2026.3.6, detailing Aqua Registry updates and the inclusion of two new packages.
  • Cargo.lock
    • Updated the aqua-registry dependency to 2026.3.3 and the mise package version to 2026.3.6.
  • Cargo.toml
    • Updated the mise package version to 2026.3.6.
  • README.md
    • Updated the displayed mise version to 2026.3.6.
  • completions/_mise
    • Updated the temporary spec file version from 2026_3_5 to 2026_3_6.
  • completions/mise.bash
    • Updated the temporary spec file version from 2026_3_5 to 2026_3_6.
  • completions/mise.fish
    • Updated the temporary spec file version from 2026_3_5 to 2026_3_6.
  • completions/mise.ps1
    • Updated the temporary spec file version from 2026_3_5 to 2026_3_6.
  • crates/aqua-registry/Cargo.toml
    • Updated the aqua-registry package version to 2026.3.3.
  • crates/aqua-registry/aqua-registry/pkgs/majorcontext/moat/registry.yaml
    • Added a new Aqua registry definition for majorcontext/moat.
  • crates/aqua-registry/aqua-registry/pkgs/sudorandom/fauxrpc/registry.yaml
    • Added a new Aqua registry definition for sudorandom/fauxrpc.
  • default.nix
    • Updated the mise package version to 2026.3.6.
  • packaging/rpm/mise.spec
    • Updated the mise package version to 2026.3.6.
  • snapcraft.yaml
    • Updated the mise snap version to 2026.3.6.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Mar 8, 2026

Greptile Summary

This is the 2026.3.6 release PR for mise, bundling ten bug fixes (fish PATH reordering, fork-bomb prevention in dependency env, Windows shim handling, GitHub latest version resolution, lockfile improvements, and more), one refactor, two documentation updates, and several aqua registry additions/updates.

Key changes to review:

  • Version bumps: Cargo.toml, default.nix, snapcraft.yaml, packaging/rpm/mise.spec, and all completion scripts updated from 2026.3.52026.3.6 — all consistent and correct.
  • moonrepo/moon registry refactor: The entry was significantly restructured to handle moon's new tar.xz release format (v1.42+). Two potential issues were found: a dead goos: darwin override whose amd64: amd64 replacement can never be reached given the current supported_envs, and Windows files entries that omit src paths despite the non-Windows entries relying on an explicit subdirectory path.
  • New aqua registry entries (betterleaks, moat, gomarkdoc, age-plugin-se, fauxrpc, mdlint): Several platform-coverage issues were flagged in the prior review round (non-standard arch replacement in betterleaks, missing supported_envs in fauxrpc and age-plugin-se, missing Windows .exe handling in gomarkdoc). The moat and mdlint entries look structurally sound.

Confidence Score: 3/5

  • Safe to merge for core mise functionality; the registry entries have unresolved platform-coverage questions that could cause installation failures for certain packages on specific platforms.
  • The core release artifacts (version bumps, changelog, completions) are all consistent and correct. The primary concerns are in the aqua registry entries: issues flagged in the prior review round (betterleaks arch replacement, fauxrpc/age-plugin-se missing supported_envs, gomarkdoc Windows exe) remain open, and two new issues in the moonrepo/moon refactor — a dead darwin override and potentially missing src paths in the Windows files block — add further uncertainty around moon installation on Windows with the latest format.
  • crates/aqua-registry/aqua-registry/pkgs/moonrepo/moon/registry.yaml (Windows files src paths and dead darwin override), and the previously flagged betterleaks, fauxrpc, age-plugin-se, and gomarkdoc registry entries.

Important Files Changed

Filename Overview
Cargo.toml Version bumped from 2026.3.5 to 2026.3.6 — routine release bump, no issues.
Cargo.lock Lock file updated to reflect version bumps for mise (2026.3.6) and aqua-registry (2026.3.3) — no issues.
crates/aqua-registry/aqua-registry/pkgs/moonrepo/moon/registry.yaml Significant refactor of the moon registry entry to support new tar.xz release format and version ranges; contains a dead darwin/amd64 override and potentially missing src paths in the Windows files block.
crates/aqua-registry/aqua-registry/pkgs/betterleaks/betterleaks/registry.yaml New registry entry for betterleaks secrets scanner; uses non-standard amd64: x64 replacement (previously flagged) — needs verification of release asset naming.
crates/aqua-registry/aqua-registry/pkgs/majorcontext/moat/registry.yaml New registry entry for the moat agent runner; supported_envs correctly restricted to linux and darwin, no issues found.
crates/aqua-registry/aqua-registry/pkgs/princjef/gomarkdoc/registry.yaml New registry entry for gomarkdoc; Windows goos: windows overrides switch to zip but the inherited top-level files.src does not account for the .exe suffix (previously flagged).
crates/aqua-registry/aqua-registry/pkgs/remko/age-plugin-se/registry.yaml New registry entry for age-plugin-se (Apple Secure Enclave); catch-all version_constraint: "true" block is missing supported_envs (previously flagged), potentially exposing Windows installs unintentionally.
crates/aqua-registry/aqua-registry/pkgs/sudorandom/fauxrpc/registry.yaml New registry entry for fauxrpc gRPC mock server; semver("<= 0.16.1") block lacks supported_envs while surrounding blocks restrict to linux/darwin (previously flagged).
crates/aqua-registry/aqua-registry/pkgs/swanysimon/mdlint/registry.yaml Renamed from markdownlint-rs to mdlint with an alias added; new registry entry looks well-structured with correct platform-specific overrides.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[moon version requested] --> B{version_constraint eval}
    B --> C["Version == @moonrepo/cli@0.12.0\nno_asset: true"]
    B --> D["semver(<= 0.1.0)\nformat: raw, rosetta2\nsupported: darwin/windows/amd64"]
    B --> E["semver(<= 0.11.1)\nformat: raw, musl\nsupported: darwin/windows/amd64"]
    B --> F["semver(<= 1.41.8)\nformat: raw, all platforms\n⚠️ no supported_envs"]
    B --> G["true (latest)\nformat: tar.xz\nsupported: linux/darwin-arm64/windows-amd64"]

    G --> H{goos override}
    H --> I["goos: darwin\namd64: amd64 ⚠️ dead code\n(darwin/amd64 not in supported_envs)"]
    H --> J["goos: windows\nformat: zip\nfiles: moon, moonx ⚠️ no src path"]

    J --> K{zip layout?}
    K --> L["root: moon.exe ✅"]
    K --> M["subdir/moon.exe ❌ extraction fails"]
Loading

Last reviewed commit: 6a3438e

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request is a standard release, bumping the version to 2026.3.6 across various files and adding two new packages to the Aqua Registry. The changes are mostly straightforward version updates. I have one suggestion to improve the maintainability of one of the new package definition files by combining redundant version override rules.

Comment on lines +16 to +29
- version_constraint: Version == "v0.0.17"
asset: fauxrpc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
format: tar.gz
checksum:
type: github_release
asset: fauxrpc_{{trimV .Version}}_checksums.txt
algorithm: sha256
- version_constraint: semver("<= 0.0.16")
asset: fauxrpc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
format: tar.gz
checksum:
type: github_release
asset: fauxrpc_{{trimV .Version}}_checksums.txt
algorithm: sha256
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

These two version_overrides blocks are identical except for the version_constraint. They can be combined into a single block using semver("<= 0.0.17") to improve maintainability and reduce duplication.

      - version_constraint: semver("<= 0.0.17")
        asset: fauxrpc_{{trimV .Version}}_{{.OS}}_{{.Arch}}.{{.Format}}
        format: tar.gz
        checksum:
          type: github_release
          asset: fauxrpc_{{trimV .Version}}_checksums.txt
          algorithm: sha256

@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 8, 2026

Hyperfine Performance

mise x -- echo

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.3.5 x -- echo 23.0 ± 0.3 22.3 27.2 1.00
mise x -- echo 23.4 ± 0.3 22.7 25.1 1.01 ± 0.02

mise env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.3.5 env 22.6 ± 0.7 22.0 28.6 1.00
mise env 22.9 ± 0.3 22.3 26.1 1.02 ± 0.03

mise hook-env

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.3.5 hook-env 23.2 ± 0.2 22.5 23.9 1.00
mise hook-env 23.7 ± 0.5 23.1 29.8 1.02 ± 0.02

mise ls

Command Mean [ms] Min [ms] Max [ms] Relative
mise-2026.3.5 ls 22.4 ± 0.3 22.0 25.6 1.00
mise ls 23.0 ± 0.3 22.3 24.5 1.02 ± 0.02

xtasks/test/perf

Command mise-2026.3.5 mise Variance
install (cached) 150ms 151ms +0%
ls (cached) 81ms 82ms -1%
bin-paths (cached) 84ms 85ms -1%
task-ls (cached) 813ms 804ms +1%

@mise-en-dev mise-en-dev force-pushed the release branch 4 times, most recently from 15514ae to 8a093eb Compare March 8, 2026 21:06
@mise-en-dev mise-en-dev force-pushed the release branch 5 times, most recently from a5f3526 to 05fe317 Compare March 9, 2026 02:43
@mise-en-dev mise-en-dev enabled auto-merge (squash) March 9, 2026 10:24
@mise-en-dev mise-en-dev force-pushed the release branch 5 times, most recently from bc3ac69 to 6df9bb5 Compare March 9, 2026 14:45
Comment on lines +73 to +76
overrides:
- goos: darwin
replacements:
amd64: amd64
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dead goos: darwin replacement override

The goos: darwin override sets amd64: amd64, which exists to override the top-level amd64: x86_64 replacement. However, supported_envs for this block only includes darwin/arm64 (line 84) — darwin/amd64 is explicitly excluded. Since the only reachable darwin platform is arm64, the arch value being substituted is always arm64 (→ aarch64), and the amd64 replacement in this override is never triggered.

This dead override could be safely removed unless there are plans to add darwin/amd64 back to supported_envs in the future:

Suggested change
overrides:
- goos: darwin
replacements:
amd64: amd64
overrides:
- goos: windows
format: zip
files:
- name: moon
- name: moonx

Comment on lines +77 to +81
- goos: windows
format: zip
files:
- name: moon
- name: moonx
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Windows files entries missing src paths

The top-level files block (lines 58–62) explicitly sets src: "{{.AssetWithoutExt}}/moon" and src: "{{.AssetWithoutExt}}/moonx", indicating the binaries live inside a subdirectory within the archive (matching the goreleaser convention of moon_cli-<arch>-<os>/moon).

The goos: windows override specifies its own files block with only name fields and no src. When aqua resolves these entries it will default src to the bare name value and look for the binaries at the root of the zip. If the Windows zip follows the same subdirectory layout as the tar.xz archives, extraction will fail with a "file not found" error.

Could you confirm that the Windows zip places moon.exe / moonx.exe at the archive root rather than in a subdirectory? If the layout is nested, the fix would be:

Suggested change
- goos: windows
format: zip
files:
- name: moon
- name: moonx
- goos: windows
format: zip
files:
- name: moon
src: "{{.AssetWithoutExt}}/moon"
- name: moonx
src: "{{.AssetWithoutExt}}/moonx"

@jdx jdx disabled auto-merge March 9, 2026 17:07
@jdx jdx merged commit 0558833 into main Mar 9, 2026
61 of 63 checks passed
@jdx jdx deleted the release branch March 9, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants