# mise v2026.8.11 — v2026.8.11: Automatic updates, remote mise installs, and versioned lockfiles

- Product: mise (https://whatsnew.fyi/product/mise)
- Vendor: mise
- Date: 2026-08-23
- Version: v2026.8.11
- Original notes: https://github.com/jdx/mise/releases/tag/v2026.8.11
- Permalink: https://whatsnew.fyi/product/mise/releases/v2026.8.11

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Add opt-in automatic self-updates with `auto_update` setting and configurable `auto_update_check_duration` that re-executes commands with the updated binary
- **added** — Add remote bootstrap capability to install a persistent mise on target hosts via `install_mise` setting or `--install-mise` flag
- **added** — Add lockfile versioning with `lockfile_version = 1` to bind each request to its resolved version, with `mise lock --upgrade` for migration
- **added** — Add Corepack replacement functionality that honors `+sha...` checksums in `packageManager` and `devEngines.packageManager` with artifact verification
- **added** — Add SHA-224 and SHA-384 hashing support and Windows script launcher for Yarn's JS CLI
- **added** — Add `mise prune --dry-run` explanation output showing why each version is prunable
- **added** — Recognize Oracle GraalVM innovation feature releases
- **changed** — Replace CLI parser from clap to usage-rs
- **fixed** — Relocate pipx virtual environments when packed into OCI images by rewriting shebangs and rebasing venv interpreter links
- **fixed** — Skip glibc precompiled binaries on musl Linux and fall back to ruby-build
- **fixed** — Stop applying environment in bash activation under `--no-hook-env`
- **fixed** — Fold any spelling of `PATH` onto a single key on Windows
- **fixed** — Filter deprecated versions during npm resolution
- **fixed** — Fix cargo warnings to use crate names and correct `go install` warning paths
- **fixed** — Suggest compatible package backends for aqua
- **fixed** — Resolve cask artifacts behind flight-created symlinks in brew
- **fixed** — Suspend progress display while sudo prompts during bootstrap
- **fixed** — Stop reinstalling brew casks on content drift
- **fixed** — Reject overlapping dotfile footprints in bootstrap
- **fixed** — Match brew cask pkgutil patterns correctly
- **fixed** — Load dotted `conf.d` fragments unconditionally and stop prompting for trust when stdin is not a tty

This release adds opt-in automatic self-updates, lets remote bootstrap leave a working mise behind on each target, and introduces versioned lockfiles that bind each request to the version it resolved. It also replaces the CLI parser with usage-rs, hardens remote Git task handling, and fixes a wide range of tool-installation, task, and config edge cases.

##### Highlights
- mise can now keep itself up to date and provision itself onto remote hosts, closing two long-standing gaps in unattended and remote workflows.
- Lockfiles gained an explicit format version so overlapping loose and exact requests can pin distinct versions, with `mise lock --upgrade` for safe migration and no surprise drift for existing files.
- The CLI parser moved from clap to usage-rs, and remote Git task paths are now contained against traversal, symlink, and Windows path escapes.

##### Added
- **self-update:** New opt-in automatic updates. Enable `auto_update` (with `auto_update_check_duration`, default `7d`) and mise will update itself before eligible interactive commands, then re-exec your original invocation with the new binary. Updates are throttled and lock-serialized, skipped in CI, offline, non-interactive, and shell-integration contexts, and failures never block the requested command. Package-managed builds are steered toward the official optimized binaries. ([#12288](https://github.com/jdx/mise/pull/12288) by @jdx)

  ```toml
  [settings]
  auto_update = true
  auto_update_check_duration = "7d"
  ```
- **bootstrap:** Remote bootstrap can now install a persistent mise on each target instead of tearing it down with the staging directory. Set `install_mise` in `[bootstrap.remote]` (or per host) or pass `--install-mise[=/path]`; the same checksum-verified executable that ran the bootstrap is installed, so the host converges on the orchestrating mise version. ([#12284](https://github.com/jdx/mise/pull/12284) by @jdx)

  ```toml
  [bootstrap.remote]
  install_mise = true  # installs to ~/.local/bin/mise
  ```
- **lock:** Lockfiles now carry `lockfile_version = 1` and bind each original request to the entry it resolved, so overlapping requests like `"1"` and `"1.0.0"` can lock different versions. Existing unversioned lockfiles stay on format 0 during ordinary `mise lock`/`install`/`upgrade` to avoid drift; run `mise lock --upgrade` to migrate (transactional, rolls back on failure). ([#12299](https://github.com/jdx/mise/pull/12299) by @jdx)
- **node:** mise can now act as a Corepack replacement, honoring the `+sha...` checksum suffixes in `packageManager` / `devEngines.packageManager` and verifying the exact npm, pnpm, Yarn, or bun artifact before installing. Adds SHA-224/SHA-384 hashing and a Windows script launcher for Yarn's JS CLI. ([#12214](https://github.com/jdx/mise/pull/12214) by @jdx)
- **prune:** `mise prune --dry-run` now explains why each version is prunable, naming either the kept versions and the configs requiring them or the fact that nothing tracked references the tool. ([#12304](https://github.com/jdx/mise/pull/12304) by @Marukome0743)
- **java:** Oracle GraalVM "innovation" feature releases are now recognized. ([#12189](https://github.com/jdx/mise/pull/12189) by @roele)

##### Fixed
- **oci:** pipx virtual environments are now relocated when packed into OCI images, rewriting host-absolute shebangs and rebasing venv interpreter links (including aliases like `python/latest`) onto the image's Python, so tools no longer dangle at runtime. ([#12211](https://github.com/jdx/mise/pull/12211) by @jdx)
- **ruby:** glibc precompiled binaries are now skipped on musl Linux, falling back to ruby-build. ([#12289](https://github.com/jdx/mise/pull/12289) by @risu729)
- **bash:** activation no longer applies the environment under `--no-hook-env`. ([#12218](https://github.com/jdx/mise/pull/12218) by @JamBalaya56562)
- **env:** any spelling of `PATH` now folds onto a single key on Windows. ([#12312](https://github.com/jdx/mise/pull/12312) by @JamBalaya565

_[Truncated at 4000 characters — full notes: https://github.com/jdx/mise/releases/tag/v2026.8.11]_