v2026.10.3 v2026.10.4

high risk

louislam/dockgeOct 5, 2026 → Oct 7, 20262 days between releases

What's New

Introduces experimental task-scoped secrets and global tool auto-updates.

Breaking Changes

  • Global, system, and home-level `[secrets]` config is now ignored in favor of project-level fnox secrets.

New Features

  • Experimental task-scoped secrets backed by fnox.
  • Automatic global tool updates with `auto_update` setting.
  • Opt-in identity install layout (experimental).
  • Dotfile merge entries to preserve application-added keys.
  • Headers authentication for the `http:` backend.

Improvements

  • Improved security for secrets output by redacting values.

Bug Fixes

  • Fixes for prune, install, and lockfile operations.
  • Fixes for npm installs from git.
  • Fixes for headers authentication on the `http:` backend.

Upgrade Notes

Enable `experimental=true` in settings to use task-scoped secrets. Update `mise.toml` to configure fnox secrets at the project level instead of global scopes. Set `auto_update=true` to enable automatic global tool updates.

The Two Releases

v2026.10.3

v2026.10.3: Dotfile groups, templated Compose projects, and secret hygiene for shell state

Oct 5, 2026· 17 days ago

Adds dotfile groups for Stow-style repositories, templated Compose projects, and secret hygiene for shell state. Fixes dotenv expansion and Ruby source builds to see dependencies.

Full release notes
v2026.10.4

v2026.10.4: Task-scoped fnox secrets, automatic global tool updates, and an opt-in identity install layout

Oct 7, 2026· 15 days ago

Adds experimental task-scoped secrets backed by fnox, automatic updates for global tools, and an opt-in identity install layout. Also includes dotfile merge entries, headers auth for the http backend, and npm installs from git.

Full release notes