[ppat-self-hosted-renovate-bot]

This PR contains the following updates:

Package	Update	Change	Pending
bitwarden/clients	patch	v2025.12.0 -> v2025.12.1
jdx/mise	patch	v2026.1.1 -> v2026.1.3	v2026.1.6 (+2)
twpayne/chezmoi	patch	v2.69.1 -> v2.69.3

---

Release Notes

bitwarden/clients (bitwarden/clients)

v2025.12.1: CLI v2025.12.1

Compare Source

Bug fix for unlock --check

Various under-the-hood improvements and minor bug fixes.

jdx/mise (jdx/mise)

v2026.1.3

Compare Source

This release introduces several powerful new features for mise, including private artifact storage via S3, enhanced upgrade controls, and improved hook management. We've also fixed important bugs affecting npm dependencies, GitHub authentication, and task inheritance in monorepos.

Highlights

S3 Backend Support - You can now use Amazon S3 for private artifact storage, enabling secure distribution of internal tools and binaries. This is particularly useful for enterprise environments that need to host proprietary tools. See the S3 backend documentation for setup instructions. (@​jdx, #​7668)

Enhanced Upgrade Command - The mise upgrade command now includes an --exclude flag to skip specific tools during bulk upgrades, and benefits from improved tab completion that shows only installed tools. This gives you more control when updating your development environment. Learn more in the upgrade command documentation. (@​jdx, #​7669, #​7670)

Hook and Environment Control - New --no-hooks and --no-env flags provide fine-grained control over mise's behavior, allowing you to skip hooks or environment variable loading when needed. This is helpful for debugging or when you need to run mise in isolation. (@​aacebedo, #​7560)

Bug Fixes

• npm circular dependencies - Fixed an issue where mise could get stuck in a loop when npm itself was listed as a dependency (@​AprilNEA, #​7644)
• GitHub authentication - Improved token handling to properly fall back to GITHUB_TOKEN when accessing github.com, resolving authentication issues for private repositories (@​subdigital, #​7667, #​7673)
• Task inheritance - Tasks defined in parent directories are now properly inherited in monorepo setups, making it easier to share common tasks across projects (@​chadxz, #​7643)
• vfox backend upgrades - Fixed upgrading tools that use symlinked installations in the vfox backend (@​TyceHerrman, #​7012)
• Architecture validation - mise now properly rejects tool downloads when the architecture doesn't match your system, preventing installation of incompatible binaries (@​jdx, #​7672)
• Self-update efficiency - The self-update command now skips unnecessary operations when you're already on the latest version (@​jdx, #​7666)

Registry Updates

Added support for new tools:

• oh-my-posh - The popular cross-shell prompt theme engine (@​scop, #​7659)
• bibtex-tidy - A BibTeX file formatter and cleaner (@​3w36zj6, #​7677)

Also fixed the kscript configuration by removing an incorrect bin_path option (@​risu729, #​7693).

New Contributors

Welcome to @​AprilNEA, @​opswole, @​subdigital, and @​aacebedo who made their first contributions to mise!

v2026.1.2

Compare Source

mise v2026.1.2 includes several important bug fixes and security improvements, particularly addressing version management edge cases and enhancing the tool's reliability across different scenarios.

This release also strengthens our GitHub workflow security to prevent potential code execution from untrusted sources, ensuring the safety of our development process and community contributions.

Bug Fixes

Version Management Improvements

• Fixed an issue where pre-release versions were incorrectly included when using latest with install_before (#​7631) - thanks to @​koh-sh
• Enhanced version filtering to properly exclude test versions (e.g., 1.0.0-test) from stable version lists (#​7647) - thanks to @​belgio99
• Resolved a year-boundary bug that caused mise self-update to fail when crossing into a new year (#​7611)

Backend and Asset Detection

• Added support for .artifactbundle.zip files in asset selection, improving compatibility with certain tool distributions (#​7657) - thanks to @​swizzlr
• Fixed HTTP backend to properly fallback to configuration when fetching tool options (#​7655) - thanks to @​roele

Task System

• Corrected tool inheritance behavior in tasks when using intermediate parent configurations (#​7637) - thanks to @​chadxz

Security

• Implemented safeguards in our GitHub workflows to prevent potential code execution from untrusted forks, enhancing the security of our development process

New Tools

• Added support for oha, a modern HTTP load testing tool (#​7633) - thanks to @​jylenhof

New Contributors

Welcome to our first-time contributors!

• @​swizzlr, @​belgio99, @​gmalinowski, @​chadxz, @​shina1024, @​jonathanagustin, and @​turbocrime

twpayne/chezmoi (twpayne/chezmoi)

v2.69.3

Compare Source

Changelog

Fixes

• e2e3d1d fix: Empty commit to re-trigger release process

v2.69.2

Compare Source

Changelog

Features

• 557cd16 feat: Add --include and --exclude flags to unmanaged command

Fixes

• d43f4c6 fix: Make joinPath template func accept string-like values

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[homelab-workflows-bot]

🎉 This PR is included in version 2.21.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀