chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
ghcr.io/astral-sh/uv	final	patch	0.12.18 → 0.12.19
jdx/mise		patch	2026.9.3 → 2026.9.7	2026.9.15 (+7)
jdx/mise	uses-with	patch	2026.9.3 → 2026.9.7	v2026.9.15 (+7)
uv	tools	patch	0.12.11 → 0.12.13	0.12.19 (+5)

---

Release Notes

astral-sh/uv (ghcr.io/astral-sh/uv)

v0.12.19

Compare Source

Released on 2026-09-24.

Python

• Add PyPy 3.11.16 and 3.12.14 (#​21847)
• Update GraalPy 3.13.0 to build 25.4.4 (#​21847)

Enhancements

• Format upload URLs with backticks in uv publish errors (#​21934)

Preview features

• Run build-backend hooks with lazy imports on CPython 3.15 and later using the build-lazy-imports preview feature (#​21967)
• Omit unused resolution settings from uv.lock and ignore changes to them when checking lockfile freshness with the resolution-inputs preview feature (#​21913)

Bug fixes

• Preserve signed and encoded query parameters in direct-URL metadata to avoid reinstalling unchanged packages (#​21971)
• Recognize 1.0.0 as satisfying ===1 during installed-package checks, matching resolution (#​21931)
• Avoid collisions between Git checkout readiness markers and .ok files in dependencies (#​21891)
• Preserve always-false python_version markers when parsing their serialized form (#​21939)

Rust API

• Restore the public FlatDistributions export and its BTreeMap conversion for downstream resolvers (#​21965)

Documentation

• Make individual preview-feature reference entries linkable by name (#​21950)

jdx/mise (jdx/mise)

v2026.9.7

Compare Source

🚀 Features

• (bootstrap) inspect dotfile sync conflicts by @​jdx in #​13144
• (lock) preserve aube dependency graphs by @​jdx in #​13131
• (lock) store Python and npm dependency graphs in native sidecars by @​jdx in #​13146

🐛 Bug Fixes

• (config) accept system in idiomatic version files by @​jdx in #​13132
• (dotfiles) support bootstrap secrets in templates by @​jdx in #​13140
• (lock) ignore release age for locked versions by @​jdx in #​13128
• (release) publish mise-agent-env before mise by @​jdx in #​13122

📦️ Dependency Updates

• bump aube to 2.2.16 by @​jdx in #​13145

📦 Registry

• restore aqua backend for mc by @​jdx in #​13124

Chore

• (ci) use large runner for registry builds by @​jdx in #​13142

Ci

• enforce per-test unit timeouts on macOS by @​jdx in #​13120

Security

• (history) restrict describe commands to global config by @​jdx in #​13134

📦 Aqua Registry Updates

New Packages (3)

• kjanat/actionlint
• microsoft/tgrep
• redhat-et/ripwire

Updated Packages (1)

• minio/mc

v2026.9.6

Compare Source

🚀 Features

• (bootstrap) declare Dock applications in order by @​azohra in #​13075
• (brew) implement mise bootstrap packages where for keg-only packages by @​himkt in #​13083
• (cli) add configurable output truncation by @​jdx in #​13112
• (daemons) manage project daemons and database presets with pitchfork by @​jdx in #​13085
• (doctor) add project diagnostic checks by @​jdx in #​13062
• (dotfiles) infer variant sources from dotfiles root by @​jdx in #​13087
• (fmt) sort lists whose order carries no meaning by @​jrandolf in #​13058
• (vfox) add backend tool discovery by @​jdx in #​13111

🐛 Bug Fixes

• (asdf) avoid recursive compatibility dispatch by @​jdx in #​13114
• (bootstrap) explain macos defaults type differences by @​jdx in #​13096
• (bootstrap) find ssh and tar on Windows for remote bootstrap by @​JamBalaya56562 in #​13117
• (brew) link keg-only-on-macOS formulae on Linux by @​lil-lon in #​13108
• (config) merge monorepo settings across overlays by @​jdx in #​13084
• (config) scope runtime lockfile lookup to effective tool config by @​nettlesh in #​13042
• (doctor) align project check roots, dir expansion, schema, and signals by @​jdx in #​13089
• (dotfiles) honor global yes setting when tracking files by @​nettlesh in #​13072
• (dotfiles) warn when tracking a symlink without its source by @​jdx in #​13095
• (http) make shared extraction opt-in by @​jdx in #​13059
• (lockfile) allow packslip to replace legacy provenance by @​jdx in #​13105
• (nushell) wrap hide-env in try instead of in-env guard by @​i-api in #​13071
• (packslip) skip unsupported lockfile targets by @​jdx in #​13102
• (schema) model dotfiles manifests by @​risu729 in #​12741
• (task) auto-install tools for run task references by @​jdx in #​13086
• (upgrade) detect letter-suffixed version updates by @​jdx in #​13119
• extract structured flight steps from tap casks by @​jdx in #​13060

📚 Documentation

• (agents) write PR titles and descriptions for release notes by @​jdx in #​13090
• (task) organise task-running guidance by @​azohra in #​13077
• diagram tracked dotfile synchronization by @​jdx in #​13069
• diagram artifact cache execution by @​jdx in #​13068
• diagram tool configuration precedence by @​jdx in #​13067
• illustrate bootstrap machine resources by @​jdx in #​13066
• illustrate project environment switching by @​jdx in #​13065
• prevent landing tabs from shifting content by @​jdx in #​13107
• prohibit drive-by AI discussion spam by @​jdx in #​13110

⚡ Performance

• (lockfile) avoid scheduling cached generation targets by @​jdx in #​13101
• (lockfile) skip generation for current warm installs by @​jdx in #​13103
• (oci) leave same-repository base layers remote during push by @​jdx in #​13055
• (oci) cache local tool layers across image builds by @​jdx in #​13056

📦️ Dependency Updates

• update rust crate aube-registry to v2.2.14 by @​renovate[bot] in #​13015
• update communique to v1.4.0 by @​jdx in #​13104
• update rattler by @​renovate[bot] in #​12966
• update rust crate aube to v2.2.14 by @​renovate[bot] in #​13014
• update rust crate usage-lib to v6.9.0 by @​renovate[bot] in #​12892
• update rust crate usage-cli to v6.9.0 by @​renovate[bot] in #​12891

📦 Registry

• add mpv (conda:mpv) by @​i-api in #​13049
• use conda for postgres, redis, and mongodb by @​jdx in #​13061
• add agent-browser by @​3w36zj6 in #​13088
• add himalaya (github:pimalaya/himalaya) by @​i-api in #​13091
• fix editorconfig-checker 4.0.1 by @​jdx in #​13098
• fix mc downloads from MinIO releases by @​jdx in #​13113

Chore

• (ci) replace actionlint with zizmor by @​jdx in #​13097

Ci

• increase vfox runner memory by @​jdx in #​13118

New Contributors

• @​lil-lon made their first contribution in #​13108

📦 Aqua Registry Updates

New Packages (1)

• getgaal/gaal

Updated Packages (1)

• yadm-dev/yadm

v2026.9.5

Compare Source

🚀 Features

• (bootstrap) support current-host macOS defaults by @​azohra in #​12983
• (bootstrap) extend friendly macos preferences by @​jdx in #​13032
• (bootstrap) patch nested macOS preference values by @​azohra in #​12984
• (bootstrap) support pre-packages file phases by @​jdx in #​13052
• (brew-cask) support structured set_permissions flight steps by @​azohra in #​13043
• (dotfiles) support platform-specific destination variants by @​jdx in #​13050
• (lock) trial complete lockfile generation by @​jdx in #​13031
• (task) support usage variables in sources and outputs by @​jdx in #​13051

🐛 Bug Fixes

• (bootstrap) detect the origin default branch when connecting dotfiles by @​Dhaulagiri in #​13037
• (bootstrap) render vars in file templates by @​nettlesh in #​13033
• (brew-cask) drop stale brew advice from the cask metadata error by @​Marukome0743 in #​12800
• (brew-cask) leave a running self-updating app to update itself by @​azohra in #​13041
• (dotfiles) keep history locks independent of cache directories by @​ascarter in #​13038
• (install) summarize interactive progress without duplicate rows by @​jdx in #​13030
• (install) reduce progress output for long CI installs by @​jdx in #​13036
• (sandbox) allow metadata on ancestors of readable paths by @​Marukome0743 in #​13039
• (self-update) select the correct armv7 release archive by @​jdx in #​13023
• (self-update) correct npm update guidance and allow silencing warnings by @​jdx in #​13028

📦 Registry

• add clipboard (github:Slackadays/Clipboard) by @​i-api in #​13044

Ci

• use the active mise binary in the nix docker test by @​jdx in #​13026

New Contributors

• @​Dhaulagiri made their first contribution in #​13037

📦 Aqua Registry Updates

New Packages (9)

• Jamf-Concepts/Notifier
• aubepkg/aube
• esengine/DeepSeek-Reasonix
• nklmilojevic/sofka
• openai/tunnel-client
• unikraft-cloud/cli
• unikraft/kraftkit
• yadm-dev/yadm
• yarnpkg/zpm

Updated Packages (5)

• Byron/dua-cli
• editorconfig-checker/editorconfig-checker
• gopasspw/gopass
• masasuzu/clrnd
• pnpm/pnpm

v2026.9.4

Compare Source

🚀 Features

• (bootstrap) add package environment selectors by @​jdx in #​12956
• (bootstrap) add nix packages and nixos export by @​jdx in #​13013
• (packslip) activate declared man pages by @​jdx in #​13012
• (task) add task-scoped quiet setting by @​jdx in #​12980

🐛 Bug Fixes

• (backend) handle unsupported ARM32 artifacts safely by @​jdx in #​13004
• (bootstrap) sign hard-linked Mach-O aliases after relocation by @​nettlesh in #​12988
• (bootstrap) deprecate config root composition by @​jdx in #​13010
• (brew) include tap metadata shims in crate package by @​jdx in #​13001
• (dotfiles) resolve history filters through portable roots by @​azohra in #​12982
• (generate) honor tool stub os for Windows launchers by @​jdx in #​13008
• (install) install a lazy tool's missing dependencies on first use by @​balintant in #​12997
• (nix) skip non-sandboxable tests by @​laozc in #​12990
• (packslip) resolve cross-platform lockfile artifacts by @​jdx in #​13002
• (packslip) preserve executable extensions on Windows by @​jdx in #​13006
• (packslip) fall back to musl for old glibc by @​jdx in #​13009
• (packslip) scope cached man paths by @​jdx in #​13016
• (prune) fail when confirmation is unavailable by @​jdx in #​13003
• release target repo is missing by @​eggplants in #​12977

⚡ Performance

• (history) rebuild index metadata with gix by @​jdx in #​13011

🧪 Testing

• (doctor) scope dotfiles warning assertion by @​jdx in #​13005

📦️ Dependency Updates

• update fedora:45 docker digest to aacbc26 by @​renovate[bot] in #​12959
• update ghcr.io/jdx/mise:rpm docker digest to 1608a6d by @​renovate[bot] in #​12962
• update ghcr.io/jdx/mise:deb docker digest to 53e8a56 by @​renovate[bot] in #​12961
• update rust crate tera-contrib to 0.3 by @​renovate[bot] in #​12964
• update ghcr.io/jdx/mise:alpine docker digest to f36692f by @​renovate[bot] in #​12960
• update zizmorcore/zizmor-action action to v0.6.3 by @​renovate[bot] in #​12963
• update dependency go to v1.27.1 by @​renovate[bot] in #​12986
• update aube to v2.2.13 by @​jdx in #​13017

Ci

• (release) publish version after release by @​jdx in #​13000
• treat mise-en-dev as a trusted actor by @​jdx in #​12968

New Contributors

• @​balintant made their first contribution in #​12997

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.