v1.11.0 v2026.9.18
jdx/miseSep 30, 2026 → Sep 30, 20260 days between releases
What's New
Adds remote config includes from git/OCI and fixes a critical security vulnerability regarding inline tool options.
Breaking Changes
- Inline tool options now require trust to prevent token leakage.
New Features
- Remote config includes from git or OCI registries.
- mise bootstrap --from accepts ?ref= to select branches or tags.
- mise lock --sidecars lists native dependency sidecar directories.
- OCI task catalogs support in task_config.includes.
- lstk registry entry added as replacement for LocalStack.
Improvements
- Gem registry source option for specific tools.
- Daemon presets export named ports as environment variables.
- proxy_idle_timeout for daemons is now documented and validated.
Bug Fixes
- Fixes daemon and dotfiles problems.
Upgrade Notes
If you use inline options in untrusted directories, run mise trust. The MISE_SAFE=1 environment variable can skip trust checks entirely.
The Two Releases
v1.11.0
Sep 30, 2026· 22 days ago
This release focuses on enhancing the inbox experience with improved media handling (GIFs, videos, stickers) across platforms like TikTok, Zalo, and Messenger. It introduces new features such as AI agent actions, Azerbaijani localization, and the Threads channel release, alongside numerous bug fixes and performance optimizations for real-time updates.
Full release notesv2026.9.18: Remote config includes, OCI task catalogs, and a trust fix for inline tool options
Sep 30, 2026· 22 days ago
This release introduces remote config includes from git or OCI registries, adds support for OCI task catalogs, and fixes a critical security vulnerability where inline tool options could leak tokens to unauthorized hosts.
Full release notes