v2026.4.21

A patch release that adds a new `mise untrust` command, teaches `mise prune` to skip tools tracked in lockfiles, and tightens GitHub asset auto-detection.

> [!NOTE]
> This release was tagged but the publish job failed before assets were uploaded. v2026.4.22 ships the same fixes alongside additional changes — install that release instead. These notes are preserved here for the changelog.

## Highlights

- New `mise untrust` command revokes trust on a config file.
- `mise prune` now respects tracked lockfiles and no longer removes tools listed in them.
- GitHub asset auto-detection prefers the shortest asset name as a tiebreaker, avoiding spurious matches on longer-named variants.
- New `--security` flag on `mise registry` includes security info in JSON output.

## Added

- **(registry)** `--security` flag on `mise registry` includes security info in JSON output. ([#9364](https://github.com/jdx/mise/pull/9364)) by @jdx
- **(trust)** New `mise untrust` command. ([#9370](https://github.com/jdx/mise/pull/9370)) by @jdx

## Fixed

- **(config)** Resolved backend opts are now limited to aliases. ([#9315](https://github.com/jdx/mise/pull/9315)) by @risu729
- **(github)** Asset auto-detection prefers the shortest asset name as a tiebreaker. ([#9361](https://github.com/jdx/mise/pull/9361)) by @jdx
- **(java)** Newer Zulu versions are detected correctly — they use a different directory structure than older releases. ([#9365](https://github.com/jdx/mise/pull/9365)) by @roele
- **(prune)** `mise prune` now respects tracked lockfiles. ([#9373](https://github.com/jdx/mise/pull/9373)) by @jdx
- **(task)** Tool installation is skipped for missing naked tasks instead of failing the run. ([#9374](https://github.com/jdx/mise/pull/9374)) by @jdx

## Documentation

- The docs site dismissible banner stacks its message and link on mobile. ([#9362](https://github.com/jdx/mise/pull/9362)) by @jdx
- Ruby compile message updated. ([#9338](https://github.com/jdx/mise/pull/9338)) by @fladson

## Registry

- Fix `flux-operator-mcp` aqua path. ([#9357](https://github.com/jdx/mise/pull/9357)) by @monotek
- Remove `openshift-install`. ([#9372](https://github.com/jdx/mise/pull/9372)) by @jdx
- Remove `go-sdk`. ([#9371](https://github.com/jdx/mise/pull/9371)) by @jdx

## New Contributors

- @fladson made their first contribution in [#9338](https://github.com/jdx/mise/pull/9338)

## Sponsor mise

mise is built by [@jdx](https://github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors. If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev).

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.4.20...v2026.4.21