# mise v2026.8.14 — v2026.8.14: npm/aube install fixes and cleaner temp/prune handling

- Product: mise (https://whatsnew.fyi/product/mise)
- Vendor: mise
- Date: 2026-08-26
- Version: v2026.8.14
- Original notes: https://github.com/jdx/mise/releases/tag/v2026.8.14
- Permalink: https://whatsnew.fyi/product/mise/releases/v2026.8.14

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Aube-backed npm installs no longer drop a synthetic `.npmrc` into the per-tool install directory, with install-scoped settings now stored as typed TOML in `.config/aube/config.toml`
- **fixed** — mise now intercepts the private `__node-gyp-bootstrap` trampoline to prevent failures in `allow_builds` installs whose lifecycle scripts call `node-gyp`
- **fixed** — Failed extraction in HTTP cache operations now cleans up temporary directories instead of leaving permanent hash-named directories behind
- **fixed** — `mise prune --configs` on Windows now correctly removes trusted config links whose target no longer exists

This is a small release focused on bug fixes for npm (aube-backed) installs, HTTP cache cleanup, and Windows config pruning.

##### Fixed
- **npm:** Aube-backed npm installs no longer drop a synthetic `.npmrc` into the per-tool install directory. Install-scoped settings such as `minimumReleaseAge`, `trustPolicyExclude`, `allowedUnpopularPackages`, and (for CLI installs) `globalDir`/`globalBinDir` now go into `.config/aube/config.toml` as typed TOML, while `allowBuilds` stays in `package.json`. Inline-table `trust_policy_excludes` / `allow_low_downloads` in `mise.toml` still round-trip correctly. ([#12425](https://github.com/jdx/mise/pull/12425) by @jdx)
- **npm:** mise now intercepts the private `__node-gyp-bootstrap` trampoline that embedded aube's lazy `node-gyp` shim re-execs. Previously naked-run rewriting turned it into `mise run __node-gyp-bootstrap …` and failed with "no tasks defined", breaking `allow_builds` installs whose lifecycle scripts call `node-gyp` (for example gemini-cli via node-pty). ([#12429](https://github.com/jdx/mise/pull/12429) by @jdx)
- **http:** A failed extraction (truncated download, unreadable archive, full disk, or Ctrl-C mid-extraction) no longer leaves a permanent hash-named temp directory behind in `http-tarballs`. All failure paths now clean up the temp directory. ([#12420](https://github.com/jdx/mise/pull/12420) by @Marukome0743)
- **prune:** `mise prune --configs` on Windows now removes trusted config links whose target no longer exists. Because Windows stores these links as plain files holding the target path, the previous existence check never fired; the link's target is now resolved before deciding whether to prune. ([#12418](https://github.com/jdx/mise/pull/12418) by @JamBalaya56562)

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.8.13...v2026.8.14

##### 💚 Sponsor mise

mise is maintained by [@jdx](https://github.com/jdx), an open source developer for [**entire.io**](https://entire.io), the title sponsor of the [jdx.dev](https://jdx.dev) open source tools. Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at [jdx.dev](https://jdx.dev/sponsors.html). Individual and company sponsorships keep mise fast, free, and independent.