chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
iglootools/common	workflow	minor	v1.7.0 → v1.13.0
iglootools/common	workflow	minor	v1.6.0 → v1.13.0
jdx/mise		patch	2026.9.3 → 2026.9.8	2026.9.16 (+7)
jdx/mise	uses-with	patch	2026.9.3 → 2026.9.8	v2026.9.16 (+7)
uv	tools	patch	0.12.10 → 0.12.13	0.12.19 (+5)

---

Release Notes

iglootools/common (iglootools/common)

v1.13.0

Compare Source

v1.12.0

Compare Source

v1.11.0

Compare Source

v1.10.0

Compare Source

v1.9.0

Compare Source

v1.8.0

Compare Source

jdx/mise (jdx/mise)

v2026.9.8

Compare Source

🚀 Features

• (dotfiles) add top-level dot command alias by @​jdx in #​13158
• (dotfiles) allow opting out of plaintext history checks by @​jdx in #​13175

🐛 Bug Fixes

• (backend) ignore disabled backends from lockfile discovery by @​jdx in #​13178
• (npm) report aube safety checks and honor --yes by @​jdx in #​13123
• (pypi) fall back when dependency graphs are unsupported by @​jdx in #​13170
• suppress missing warnings for lazy tools by @​jdx in #​13169

📚 Documentation

• clarify npm, pypi, and lockfile workflows by @​jdx in #​13149

⚡ Performance

• (bootstrap) fetch brew metadata concurrently by @​jdx in #​13151
• (bootstrap) prepare brew bottles concurrently by @​jdx in #​13152
• (bootstrap) pipeline brew bottle installs by @​jdx in #​13155
• (ci) enforce warnings in Windows unit tests by @​jdx in #​13148

🧪 Testing

• extend timeout for CLI graph tests by @​jdx in #​13160

📦️ Dependency Updates

• update usage to 6.9.1 by @​jdx in #​13172

📦 Registry

• add poppler (conda:poppler) by @​i-api in #​13133

Ci

• (docs) publish documentation only for releases by @​jdx in #​13176
• retry only failing e2e tests by @​jdx in #​13177

v2026.9.7

Compare Source

🚀 Features

• (bootstrap) inspect dotfile sync conflicts by @​jdx in #​13144
• (lock) preserve aube dependency graphs by @​jdx in #​13131
• (lock) store Python and npm dependency graphs in native sidecars by @​jdx in #​13146

🐛 Bug Fixes

• (config) accept system in idiomatic version files by @​jdx in #​13132
• (dotfiles) support bootstrap secrets in templates by @​jdx in #​13140
• (lock) ignore release age for locked versions by @​jdx in #​13128
• (release) publish mise-agent-env before mise by @​jdx in #​13122

📦️ Dependency Updates

• bump aube to 2.2.16 by @​jdx in #​13145

📦 Registry

• restore aqua backend for mc by @​jdx in #​13124

Chore

• (ci) use large runner for registry builds by @​jdx in #​13142

Ci

• enforce per-test unit timeouts on macOS by @​jdx in #​13120

Security

• (history) restrict describe commands to global config by @​jdx in #​13134

📦 Aqua Registry Updates

New Packages (3)

• kjanat/actionlint
• microsoft/tgrep
• redhat-et/ripwire

Updated Packages (1)

• minio/mc

v2026.9.6

Compare Source

🚀 Features

• (bootstrap) declare Dock applications in order by @​azohra in #​13075
• (brew) implement mise bootstrap packages where for keg-only packages by @​himkt in #​13083
• (cli) add configurable output truncation by @​jdx in #​13112
• (daemons) manage project daemons and database presets with pitchfork by @​jdx in #​13085
• (doctor) add project diagnostic checks by @​jdx in #​13062
• (dotfiles) infer variant sources from dotfiles root by @​jdx in #​13087
• (fmt) sort lists whose order carries no meaning by @​jrandolf in #​13058
• (vfox) add backend tool discovery by @​jdx in #​13111

🐛 Bug Fixes

• (asdf) avoid recursive compatibility dispatch by @​jdx in #​13114
• (bootstrap) explain macos defaults type differences by @​jdx in #​13096
• (bootstrap) find ssh and tar on Windows for remote bootstrap by @​JamBalaya56562 in #​13117
• (brew) link keg-only-on-macOS formulae on Linux by @​lil-lon in #​13108
• (config) merge monorepo settings across overlays by @​jdx in #​13084
• (config) scope runtime lockfile lookup to effective tool config by @​nettlesh in #​13042
• (doctor) align project check roots, dir expansion, schema, and signals by @​jdx in #​13089
• (dotfiles) honor global yes setting when tracking files by @​nettlesh in #​13072
• (dotfiles) warn when tracking a symlink without its source by @​jdx in #​13095
• (http) make shared extraction opt-in by @​jdx in #​13059
• (lockfile) allow packslip to replace legacy provenance by @​jdx in #​13105
• (nushell) wrap hide-env in try instead of in-env guard by @​i-api in #​13071
• (packslip) skip unsupported lockfile targets by @​jdx in #​13102
• (schema) model dotfiles manifests by @​risu729 in #​12741
• (task) auto-install tools for run task references by @​jdx in #​13086
• (upgrade) detect letter-suffixed version updates by @​jdx in #​13119
• extract structured flight steps from tap casks by @​jdx in #​13060

📚 Documentation

• (agents) write PR titles and descriptions for release notes by @​jdx in #​13090
• (task) organise task-running guidance by @​azohra in #​13077
• diagram tracked dotfile synchronization by @​jdx in #​13069
• diagram artifact cache execution by @​jdx in #​13068
• diagram tool configuration precedence by @​jdx in #​13067
• illustrate bootstrap machine resources by @​jdx in #​13066
• illustrate project environment switching by @​jdx in #​13065
• prevent landing tabs from shifting content by @​jdx in #​13107
• prohibit drive-by AI discussion spam by @​jdx in #​13110

⚡ Performance

• (lockfile) avoid scheduling cached generation targets by @​jdx in #​13101
• (lockfile) skip generation for current warm installs by @​jdx in #​13103
• (oci) leave same-repository base layers remote during push by @​jdx in #​13055
• (oci) cache local tool layers across image builds by @​jdx in #​13056

📦️ Dependency Updates

• update rust crate aube-registry to v2.2.14 by @​renovate[bot] in #​13015
• update communique to v1.4.0 by @​jdx in #​13104
• update rattler by @​renovate[bot] in #​12966
• update rust crate aube to v2.2.14 by @​renovate[bot] in #​13014
• update rust crate usage-lib to v6.9.0 by @​renovate[bot] in #​12892
• update rust crate usage-cli to v6.9.0 by @​renovate[bot] in #​12891

📦 Registry

• add mpv (conda:mpv) by @​i-api in #​13049
• use conda for postgres, redis, and mongodb by @​jdx in #​13061
• add agent-browser by @​3w36zj6 in #​13088
• add himalaya (github:pimalaya/himalaya) by @​i-api in #​13091
• fix editorconfig-checker 4.0.1 by @​jdx in #​13098
• fix mc downloads from MinIO releases by @​jdx in #​13113

Chore

• (ci) replace actionlint with zizmor by @​jdx in #​13097

Ci

• increase vfox runner memory by @​jdx in #​13118

New Contributors

• @​lil-lon made their first contribution in #​13108

📦 Aqua Registry Updates

New Packages (1)

• getgaal/gaal

Updated Packages (1)

• yadm-dev/yadm

v2026.9.5

Compare Source

🚀 Features

• (bootstrap) support current-host macOS defaults by @​azohra in #​12983
• (bootstrap) extend friendly macos preferences by @​jdx in #​13032
• (bootstrap) patch nested macOS preference values by @​azohra in #​12984
• (bootstrap) support pre-packages file phases by @​jdx in #​13052
• (brew-cask) support structured set_permissions flight steps by @​azohra in #​13043
• (dotfiles) support platform-specific destination variants by @​jdx in #​13050
• (lock) trial complete lockfile generation by @​jdx in #​13031
• (task) support usage variables in sources and outputs by @​jdx in #​13051

🐛 Bug Fixes

• (bootstrap) detect the origin default branch when connecting dotfiles by @​Dhaulagiri in #​13037
• (bootstrap) render vars in file templates by @​nettlesh in #​13033
• (brew-cask) drop stale brew advice from the cask metadata error by @​Marukome0743 in #​12800
• (brew-cask) leave a running self-updating app to update itself by @​azohra in #​13041
• (dotfiles) keep history locks independent of cache directories by @​ascarter in #​13038
• (install) summarize interactive progress without duplicate rows by @​jdx in #​13030
• (install) reduce progress output for long CI installs by @​jdx in #​13036
• (sandbox) allow metadata on ancestors of readable paths by @​Marukome0743 in #​13039
• (self-update) select the correct armv7 release archive by @​jdx in #​13023
• (self-update) correct npm update guidance and allow silencing warnings by @​jdx in #​13028

📦 Registry

• add clipboard (github:Slackadays/Clipboard) by @​i-api in #​13044

Ci

• use the active mise binary in the nix docker test by @​jdx in #​13026

New Contributors

• @​Dhaulagiri made their first contribution in #​13037

📦 Aqua Registry Updates

New Packages (9)

• Jamf-Concepts/Notifier
• aubepkg/aube
• esengine/DeepSeek-Reasonix
• nklmilojevic/sofka
• openai/tunnel-client
• unikraft-cloud/cli
• unikraft/kraftkit
• yadm-dev/yadm
• yarnpkg/zpm

Updated Packages (5)

• Byron/dua-cli
• editorconfig-checker/editorconfig-checker
• gopasspw/gopass
• masasuzu/clrnd
• pnpm/pnpm

v2026.9.4

Compare Source

🚀 Features

• (bootstrap) add package environment selectors by @​jdx in #​12956
• (bootstrap) add nix packages and nixos export by @​jdx in #​13013
• (packslip) activate declared man pages by @​jdx in #​13012
• (task) add task-scoped quiet setting by @​jdx in #​12980

🐛 Bug Fixes

• (backend) handle unsupported ARM32 artifacts safely by @​jdx in #​13004
• (bootstrap) sign hard-linked Mach-O aliases after relocation by @​nettlesh in #​12988
• (bootstrap) deprecate config root composition by @​jdx in #​13010
• (brew) include tap metadata shims in crate package by @​jdx in #​13001
• (dotfiles) resolve history filters through portable roots by @​azohra in #​12982
• (generate) honor tool stub os for Windows launchers by @​jdx in #​13008
• (install) install a lazy tool's missing dependencies on first use by @​balintant in #​12997
• (nix) skip non-sandboxable tests by @​laozc in #​12990
• (packslip) resolve cross-platform lockfile artifacts by @​jdx in #​13002
• (packslip) preserve executable extensions on Windows by @​jdx in #​13006
• (packslip) fall back to musl for old glibc by @​jdx in #​13009
• (packslip) scope cached man paths by @​jdx in #​13016
• (prune) fail when confirmation is unavailable by @​jdx in #​13003
• release target repo is missing by @​eggplants in #​12977

⚡ Performance

• (history) rebuild index metadata with gix by @​jdx in #​13011

🧪 Testing

• (doctor) scope dotfiles warning assertion by @​jdx in #​13005

📦️ Dependency Updates

• update fedora:45 docker digest to aacbc26 by @​renovate[bot] in #​12959
• update ghcr.io/jdx/mise:rpm docker digest to 1608a6d by @​renovate[bot] in #​12962
• update ghcr.io/jdx/mise:deb docker digest to 53e8a56 by @​renovate[bot] in #​12961
• update rust crate tera-contrib to 0.3 by @​renovate[bot] in #​12964
• update ghcr.io/jdx/mise:alpine docker digest to f36692f by @​renovate[bot] in #​12960
• update zizmorcore/zizmor-action action to v0.6.3 by @​renovate[bot] in #​12963
• update dependency go to v1.27.1 by @​renovate[bot] in #​12986
• update aube to v2.2.13 by @​jdx in #​13017

Ci

• (release) publish version after release by @​jdx in #​13000
• treat mise-en-dev as a trusted actor by @​jdx in #​12968

New Contributors

• @​balintant made their first contribution in #​12997

astral-sh/uv (uv)

v0.12.13

Compare Source

Released on 2026-09-10.

Python

• Add GraalPy 3.13.0 (#​21431)

Enhancements

• Verify hashes when downloading PEP 658 metadata sidecars (#​21563)

Preview features

• Respect ty exclusions when uv check automatically selects members of a virtual workspace (#​21555)

Performance

• Avoid full wheel downloads during resolution by reusing supported hashes from direct URL fragments when metadata is available separately (#​21279)

Bug fixes

• Edit Windows entry-point launcher resources in memory to support Nano Server and reduce antivirus contention (#​18713)
• Prefer core-metadata over legacy aliases in JSON index responses (#​21563)

v0.12.12

Compare Source

Released on 2026-09-09.

The executables in our macOS and Windows release archives and uv and uv_build wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Bug fixes

• Exclude distributions uploaded after the exclude-newer cutoff from lockfiles and generated requirement hashes (#​21539)

v0.12.11

Compare Source

Released on 2026-09-08.

Preview features

• Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#​20146)
• Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#​21462)

Performance

• Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#​21478)
• Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#​21468)
• Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#​21500)
• Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#​21499)
• Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#​21523)

Bug fixes

• Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#​21223)
• Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#​21543)
• Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#​21544)
• Support PowerShell virtual environment activation from UNC paths, including WSL paths (#​19159)
• Trim surrounding whitespace from entries in .python-version and .python-versions files (#​21529)
• Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#​21496)
• Warn and continue when uv python list cannot query an interpreter (#​21498)

Documentation

• Restore TOML syntax highlighting for exclude-newer examples (#​21534)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.