v2026.10.12 v2026.10.13

medium risk

jdx/miseOct 16, 2026 → Oct 17, 20261 day between releases

What's New

Ignores settings in untrusted configs and adds template rendering support

Breaking Changes

  • Untrusted project configs can no longer change settings until the project is explicitly trusted.

New Features

  • Per-version-range backend options in the registry.
  • Command wrapper values render as templates.
  • [bootstrap.repos] supports templated URLs and refs.
  • New {{ system_brew_prefix }} template variable.
  • vfox PreInstall hooks support headers table.

Improvements

  • Bumped zip dependency to 9.x to fix security vulnerability GHSA-4684-h2q9-2vcp.
  • Settings files are now parsed once per load for improved performance.

Bug Fixes

  • Fixed lockfile recording issues on Windows.
  • Fixed task hanging problems.
  • Fixed per-version tool option application.

Upgrade Notes

Run `mise trust` on cloned repositories to restore settings like `node.mirror_url` that were previously applied automatically. Command wrappers and bootstrap repositories now support template variables, so verify your configuration strings are valid.

The Two Releases

v2026.10.12

v2026.10.12: Per-tool Python runtimes for PyPI tools, Gradle workspace discovery, and env file find_up

Oct 16, 2026· 6 days ago

This release introduces per-tool Python runtimes for PyPI tools, adds support for Gradle workspace discovery in monorepo tasks, and enhances `env._.file` with recursive search capabilities. It also improves the resilience of GitHub lookups and fixes environment leakage issues.

Full release notes
v2026.10.13

v2026.10.13: Untrusted project configs can no longer change settings

Oct 17, 2026· 5 days ago

This release introduces a security enhancement to ignore `[settings]` in untrusted project configurations until explicitly trusted. It also adds support for per-version-range backend options in the registry and template rendering for command wrappers and bootstrap repositories. Additionally, it resolves various bugs related to lockfiles, task execution, and multi-version tool options.

Full release notes