v2026.10.8 v2026.10.9
jdx/miseOct 11, 2026 → Oct 13, 20262 days between releases
What's New
Requires trust for path versions and adds apt/macOS/Fedora bootstrap support
Breaking Changes
- `path:` tool versions now require trust to prevent unauthorized PATH manipulation
- `opencode@latest` now installs OpenCode 2; pin to `opencode@1` to stay on v1
- `mise bootstrap --adopt` rejects repository URLs containing embedded credentials
New Features
- Support for apt sources (PPAs) and vendor repositories
- Support for macOS login items configuration
- Support for `run0` and `doas` as alternatives to `sudo`
- Support for installing package groups via `dnf:`
- GitHub OAuth conveniences including device code copying and secure token caching
Improvements
- Improved handling of `dnf:` installs on Fedora Atomic hosts using `rpm-ostree layering`
- Improved GitHub OAuth handling
- Fixed npm lockfile handling
- Fixed Homebrew bottle installation issues
- Improved dotfiles status reporting
Bug Fixes
- Fixed npm lockfile handling
- Fixed Homebrew bottle installation issues
- Fixed download file names decoding from URLs to prevent directory traversal
- Removed deprecation warning for `go.mod` files
Upgrade Notes
Run `mise trust` if your `.tool-versions` or `mise.toml` contains `path:` versions from untrusted sources to restore functionality. Update your `opencode` pin if you were relying on the default `@latest` behavior.
The Two Releases
v2026.10.8: Stable `global` install link for IDEs
Oct 11, 2026· 11 days ago
This release introduces a stable `global` symlink for IDEs to use a consistent path for tools, improves reliability with HTTP request retries, and fixes lockfile handling for tags containing `@`.
Full release notesv2026.10.9: path: tool versions require trust; apt repositories, login items and run0/doas in bootstrap
Oct 13, 2026· 9 days ago
This release addresses a critical security vulnerability by requiring trust for `path:` tool versions and significantly expands bootstrap capabilities, adding support for apt repositories, macOS login items, Fedora Atomic layering, and privilege elevation tools like `run0`/`doas`. It also improves GitHub OAuth handling, dotfiles status reporting, and fixes numerous issues across various tool backends.
Full release notes