v2026.10.3 v2026.10.4

medium risk

jdx/miseOct 5, 2026 → Oct 7, 20262 days between releases

What's New

Adds experimental secrets, auto-updates, and npm git installs.

Breaking Changes

  • Global, system, and home-level `[secrets]` config is ignored when using task-scoped secrets.

New Features

  • Experimental task-scoped secrets backed by fnox.
  • Automatic global tool updates via the `auto_update` setting.
  • Opt-in identity install layout.
  • npm packages can now be installed from git URLs.
  • Dotfile `merge` entries for selective file merging.

Improvements

  • Headers auth support for the `http:` backend.

Bug Fixes

  • A set of prune, install, and lockfile fixes.

Upgrade Notes

Enable task-scoped secrets with `mise settings experimental=true` and install fnox 1.39.0+. Global secrets configuration is ignored when using task-scoped secrets.

The Two Releases

v2026.10.3

v2026.10.3: Dotfile groups, templated Compose projects, and secret hygiene for shell state

Oct 5, 2026· 17 days ago

This release adds dotfile groups for Stow-style repositories and templated Compose projects, alongside important security hygiene changes to prevent secrets from being copied into shell state.

Full release notes
v2026.10.4

v2026.10.4: Task-scoped fnox secrets, automatic global tool updates, and an opt-in identity install layout

Oct 7, 2026· 14 days ago

The release introduces experimental task-scoped secrets, automatic global tool updates, and an opt-in identity install layout, along with npm installs from git and dotfile merge entries.

Full release notes