deps: update dependency jdx/mise to v2026.2.6

[renovate]

This PR contains the following updates:

Package	Update	Change
jdx/mise	patch	2026.2.3 → 2026.2.6

---

Release Notes

jdx/mise (jdx/mise)

v2026.2.6: : Shell Expansion & Source Tracking

Compare Source

This release brings a couple of nice quality-of-life improvements alongside several bug fixes.

Highlights

Shell-style variable expansion in env values (#​8029) - You can now use shell-style variable expansion like ${VAR:-default} and ${VAR:+alternate} directly in your mise.toml environment variables. This makes it easier to set up flexible configurations without needing to drop into shell scripts.

New --all-sources flag for mise ls (#​8019) - Thanks to @​TylerHillery for adding this flag, which shows all the sources where a tool version is defined. Useful for debugging why a particular version is being used when you have multiple config files.

Bug Fixes

• gem backend: Fixed Windows support and resolved a newline issue in gem scripts (#​8031, #​8034) - Thanks @​my1e5!
• lockfile: Tools are now written to the lockfile matching their source config, fixing issues where lockfile entries could get misattributed (#​8012)
• mise ls: Sources in --all-sources output are now sorted deterministically (#​8037)
• tasks: File tasks now auto-install tools defined in mise.toml, matching the behavior of inline tasks (#​8030)

Security

• Updated the time crate to 0.3.47 to address RUSTSEC-2026-0009 (#​8026)

New Tools

• tirith - Thanks @​sheeki03!
• mas (Mac App Store CLI) - Thanks @​TyceHerrman!

New Contributors

Welcome to @​sheeki03 and @​TylerHillery for their first contributions!

📦 Aqua Registry Updates

New Packages (1)

• kubernetes-sigs/kubectl-validate

Updated Packages (6)

• flux-iac/tofu-controller/tfctl
• gogs/gogs
• j178/prek
• syncthing/syncthing
• tuist/tuist
• yaml/yamlscript

v2026.2.5: : Lockfiles Break Free

Compare Source

This is a small maintenance release with one user-facing improvement.

Bug Fixes

• Lockfiles no longer require experimental mode - You can now use mise.lock files without setting experimental = true in your configuration. Lockfiles help ensure reproducible tool versions across your team, and this change makes them accessible to everyone by default. (#​8011)

For more information on lockfiles, see the documentation.

📦 Aqua Registry Updates

Updated Packages (1)

• uutils/coreutils

v2026.2.4: : Taming the Environment

Compare Source

This release focuses on fixing several edge cases in environment handling and tool management. Users working with complex environment configurations, npm package managers, and locked tool versions will find this update particularly helpful.

Bug Fixes

• Environment variable resolution for tool templates: When using env._.source to source environment files, tool templates now correctly resolve the sourced environment variables. Previously, tool version templates that depended on sourced env vars might not have worked as expected. Thanks to @​corymhall for this fix! #​7895

• npm package manager dependencies: When using mise to manage Node.js package managers (npm, yarn, pnpm, bun), mise now only declares the specifically configured package manager as a dependency rather than all of them. This prevents unnecessary dependency resolution issues. #​7995

• Respect use_locked_version during upgrades: The mise upgrade command now properly respects the use_locked_version setting when checking tracked configs. If you have this setting enabled, upgrades will now correctly use the locked versions from your config files. #​7997

• Ignore MISE_TOOL_VERSION in env parsing: Fixed an issue where the internal MISE_TOOL_VERSION environment variable could interfere with environment variable parsing, preventing potential conflicts in certain workflows. #​8004

New Contributors

Welcome to @​corymhall who made their first contribution to mise! 🎉

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.