fix(deps): update dependency jdx/mise to v2026.5.4

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
jdx/mise	patch	2026.5.0 → 2026.5.4	2026.5.10 (+5)

---

Release Notes

jdx/mise (jdx/mise)

v2026.5.4

Compare Source

🚀 Features

• (java) remove musl feature in favor of autom. musl detection and alpine-linux versions by @​roele in #​9688

🚜 Refactor

• (schema) stop patching task_template in render script by @​risu729 in #​9680

📚 Documentation

• (deps) drop codegen example from configuration section by @​jdx in 6b2d851

⚡ Performance

• avoid spawning process to set exit code by @​vemoo in #​9723

📦️ Dependency Updates

• update ghcr.io/jdx/mise:rpm docker digest to b8b0b72 by @​renovate[bot] in #​9711
• update ghcr.io/jdx/mise:alpine docker digest to f130900 by @​renovate[bot] in #​9709
• update ghcr.io/jdx/mise:deb docker digest to 71bda11 by @​renovate[bot] in #​9710
• bump rattler crates together by @​jdx in #​9721
• update rust crate junction to v2 by @​renovate[bot] in #​9726
• update rust docker digest to 4d4ec51 by @​renovate[bot] in #​9734

📦 Registry

• use symlink_bins in ibmcloud by @​dnwe in #​9685

Chore

• (ci) pass mise github token to tests by @​risu729 in #​9684

📦 Aqua Registry Updates

New Packages (2)

• DataDog/managed-kubernetes-auditing-toolkit
• oracle.com/sqlcl

Updated Packages (3)

• alltuner/mise-completions-sync
• iann0036/iamlive
• pnpm/pnpm

v2026.5.3

Compare Source

🐛 Bug Fixes

• (aqua) resolve latest from GitHub releases by @​risu729 in #​9277

📦️ Dependency Updates

• update ubuntu:26.04 docker digest to f3d2860 by @​renovate[bot] in #​9697
• update ghcr.io/jdx/mise:alpine docker digest to d15f3f9 by @​renovate[bot] in #​9694
• update ghcr.io/jdx/mise:rpm docker digest to 9084f68 by @​renovate[bot] in #​9696
• update ghcr.io/jdx/mise:deb docker digest to dd8a908 by @​renovate[bot] in #​9695
• update rust crate ctor to 0.12 by @​renovate[bot] in #​9698

Chore

• (ci) increase lint job timeout for clippy by @​risu729 in #​9682
• (hk) drop jq from schema lint step by @​risu729 in #​9681

📦 Aqua Registry Updates

New Packages (2)

• DataDog/pup
• reviewdog/nightly

Updated Packages (1)

• gittuf/gittuf

v2026.5.2

Compare Source

🚀 Features

• (aqua) support registry libc variants by @​jdx in #​9652
• (bin-paths) add executable names output by @​risu729 in #​9617

🐛 Bug Fixes

• (aqua) preserve configured file extensions by @​risu729 in #​9611
• (aqua) support registry file links by @​risu729 in #​9610
• (backend) reject bare package backend names by @​risu729 in #​9608
• (backend) apply inline tool option overrides by @​risu729 in #​9306
• (backend) skip versions host for local tool opts by @​risu729 in #​9568
• (github) chmod explicit archive bin by @​risu729 in #​9609
• (install) skip remote-versions refresh in prefer-offline mode by @​jdx in #​9627
• (lock) scope targets to active project root by @​risu729 in #​9319
• (lockfile) respect existing platforms during auto-lock by @​jdx in #​9621
• (pipx) filter yanked pypi releases by @​risu729 in #​9607
• (pipx) declare python as a backend dependency by @​jdx in #​9678
• (schema) update refs to $defs in mise-registry-tool.json by @​risu729 in #​9671
• (task) terminate parallel siblings on failure via process groups by @​jdx in #​9655
• (task) stable MISE_PROJECT_ROOT for monorepo tasks, add MISE_MONOREPO_ROOT by @​jdx in #​9657
• (trust) run enter hooks after trusting config by @​risu729 in #​9634
• (ui) stop clearing screen for prompts by @​jdx in #​9619
• use /bin/cp on macos by @​pdehlke in #​9656

🚜 Refactor

• (aqua) store aqua var defaults as strings by @​risu729 in #​9645
• (config) support structured TOML values in registry backend options by @​risu729 in #​9584
• (deps) remove serde_derive dependency by @​risu729 in #​9670
• (deps) remove anyhow dependency by @​risu729 in #​9661
• (deps) use std::sync::LazyLock instead of once_cell::Lazy by @​risu729 in #​9668
• (schema) generate task schema from mise schema by @​risu729 in #​9581
• (schema) reuse task props with unevaluatedProperties by @​risu729 in #​9582
• (schema) reuse registry common types by @​risu729 in #​9648
• (schema) reuse plugin script config by @​risu729 in #​9647
• (schema) use $defs in schema files by @​risu729 in #​9646

📚 Documentation

• (node) add tips for enabling node idiomatic by @​fu050409 in #​9675

🧪 Testing

• (cli) remove nondeterministic tool depends assertion by @​risu729 in #​9633
• (e2e) pin uv to 0.11.8 around astral-sh/uv#19278 by @​jdx in #​9618
• (e2e) wait for docker env cleanup by @​risu729 in #​9631
• (zig) use official zig instead of mach mirror by @​jdx in #​9659

📦️ Dependency Updates

• fall through to hash check when providers have no outputs by @​jdx in #​9622
• bump Cargo.lock by @​jdx in #​9625

📦 Registry

• remove registry depends by @​risu729 in #​9571
• add code-review-graph (pipx:code-review-graph) by @​chautruonglong in #​9673

Chore

• (ci) split large registry test-tool changes by @​risu729 in #​9628
• (ci) make perf script robust to runner noise by @​jdx in #​9635
• (ci) skip hyperfine comments without permission by @​risu729 in #​9629

New Contributors

• @​chautruonglong made their first contribution in #​9673
• @​pdehlke made their first contribution in #​9656

📦 Aqua Registry Updates

New Packages (5)

• anthropics/anthropic-cli
• crates.io/wasmi_cli
• openclaw/gogcli
• racket-lang.org/racket-minimal
• runs-on/cli

Updated Packages (13)

• UpCloudLtd/upcloud-cli
• aristocratos/btop
• dprint/dprint
• j178/prek
• jdx/hk
• jdx/mise
• jdx/usage
• jreleaser/jreleaser
• jreleaser/jreleaser/standalone
• pnpm/pnpm
• suzuki-shunsuke/cmdx
• suzuki-shunsuke/ghir
• twpayne/chezmoi

v2026.5.1

Compare Source

🚀 Features

• (backend) support top-level aqua cosign verification by @​risu729 in #​9111

🐛 Bug Fixes

• (schema) validate all schema files with draft2020 and strict mode by @​risu729 in #​9594
• (shim) skip network resolution for installed tool dirs by @​jdx in #​9599

📚 Documentation

• (dev-tools) clarify vfox metadata depends for install hooks by @​risu729 in #​9573
• (plugins) remove registry submission guidance by @​risu729 in #​9577

📦️ Dependency Updates

• lock file maintenance by @​renovate[bot] in #​9586

📦 Registry

• remove bashly asdf fallback by @​risu729 in #​9578
• use github backend for rebar by @​risu729 in #​9576
• add wasm-tools (aqua:bytecodealliance/wasm-tools) by @​2xdevv in #​9596
• enable symlink_bins for elixir-ls by @​AlternateRT in #​9592

Chore

• (release) always append sponsor block to release notes by @​jdx in #​9580
• warn on vendored vfox embedded plugins by @​risu729 in #​9588
• prefer registry shorthands over cargo/npm backends in mise.toml by @​risu729 in #​9595

📦 Aqua Registry Updates

New Packages (2)

• salesforce/reactive-grpc/protoc-gen-reactor-grpc
• spinframework/spin

Updated Packages (1)

• pnpm/pnpm

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

This PR updates jdx/mise from v2026.5.0 to v2026.5.4, which includes four patch releases (v2026.5.1, v2026.5.2, v2026.5.3, and v2026.5.4).

Key Changes Across Versions:

v2026.5.4 (May 9, 2026):

• Java on Alpine Linux: Automatic musl detection (backward compatible)
• Performance: PowerShell activation speedup (~270ms improvement by eliminating unnecessary shell spawning)
• Registry: IBM Cloud package now uses symlink_bins to prevent shadowing system utilities
• Schema: Minor adjustments to task template schema generation

v2026.5.3 (May 8, 2026):

• Aqua Backend: Fixed latest resolution for GitHub-backed tools to use GitHub's latest-release endpoint instead of chronological tag walking
• Dependency Updates: Rust crate ctor updated to 0.12

v2026.5.2 (May 7, 2026):

• Aqua Registry: Added support for libc variants (gnu vs musl) and file linking
• Monorepo Support: Added MISE_MONOREPO_ROOT environment variable
• Task Management: Parallel tasks now terminate promptly on failure using process groups
• Multiple Bug Fixes: Offline mode, lockfile handling, PyPI yanked releases filtering, trust hooks timing

v2026.5.1 (May 5, 2026):

• Aqua Backend: Top-level cosign verification support
• Reshim Stability: Fixed mise reshim handling of non-resolvable directory names
• Schema: All schemas now validate against JSON Schema draft 2020-12 in strict mode
• Registry: Migration of rebar to GitHub backend

No Breaking Changes Identified:

• No changes to mise use -g command behavior
• No changes to installation directory structure (/mise/installs/*)
• No changes to environment variable handling
• All changes are backward compatible patch-level updates

🎯 Impact Scope Investigation

Dockerfile Usage Analysis:
The codebase uses mise exclusively in the Dockerfile build process for installing language runtimes:

• Location: Dockerfile:6 - ARG MISE_VERSION=2026.5.4
• Installation: Downloads mise binary from GitHub releases for the mise stage
• Runtime Installation: Uses mise use -g <runtime>@<version> for:
  • Node.js 24.14.1 (Dockerfile:36)
  • Ruby 3.4.9 (Dockerfile:45)
  • Go 1.26.2 (Dockerfile:56)
  • Python 3.14.4 (Dockerfile:69)
  • Rust 1.94.1 (Dockerfile:78)

CI/CD Usage:

• GitHub Actions CI uses jdx/mise-action@v4.0.1 (separate from mise version in Dockerfile)
• No direct dependency on mise binary version in CI workflows
• CI reads mise.toml for tool versions (Go, golangci-lint, lefthook, hadolint, Node, Ruby, Rust, Python)

Codebase References:
All mise references in the Go codebase are hardcoded paths to installed runtimes:

• /mise/installs/node/current/bin/node (runtime.go:179, 564, 576)
• /mise/installs/ruby/current/bin/ruby (runtime.go:228)
• /mise/installs/python/current/bin/python3 (runtime.go:292)
• /mise/installs/go/current/bin/go (runtime.go:357)
• /mise/cargo/bin/rustc (runtime.go:472)

These paths are outputs from mise installation and are not affected by the mise version update.

Impact on Dependencies:

• No changes to how mise installs or manages runtimes
• The update includes registry improvements (aqua backend, pipx backend) that don't affect this project's basic runtime installation use case
• Performance improvements (PowerShell activation) don't impact Linux-based Docker container usage

💡 Recommended Actions

Immediate Actions:

1. ✅ Safe to Merge: This is a straightforward patch version update with no breaking changes
2. Testing: The existing E2E test suite will validate that all runtime installations work correctly after the update

Post-Merge Validation:

1. Monitor the Docker build process to ensure all runtime installations complete successfully
2. Verify E2E tests pass on both amd64 and arm64 architectures (as per CI matrix)
3. No code changes required in the repository

Optional Considerations:

• The update brings performance improvements and bug fixes that benefit overall stability
• Aqua backend improvements may benefit future integration if the project adopts aqua registry tools
• Schema validation improvements ensure better configuration file handling

🔗 Reference Links

• v2026.5.4 Release
• v2026.5.3 Release
• v2026.5.2 Release
• v2026.5.1 Release
• mise CHANGELOG
• PR Diff

Generated by koki-develop/claude-renovate-review