deps: update dependency jdx/mise to v2026.3.3

[renovate]

This PR contains the following updates:

Package	Update	Change
jdx/mise	patch	2026.3.0 → 2026.3.3

---

Release Notes

jdx/mise (jdx/mise)

v2026.3.3: : Standalone installer zstd fix

Compare Source

A single-fix patch release that corrects the standalone installer's zstd archive selection logic on systems where the zstd binary is not installed.

Fixed

• Standalone installer no longer selects zstd archives when zstd is not installed -- The tar_supports_zstd() function returned true for GNU tar >= 1.31 regardless of whether the zstd binary was actually present on the system. Since GNU tar shells out to zstd rather than linking against it, this caused extraction to fail. The fix checks for the zstd binary upfront before evaluating the tar version. A separate fallback branch in get_ext() that could also select a .tar.zst archive without verifying zstd availability has been removed. #​8460 by @​octo

New Contributors

• @​octo made their first contribution in #​8460

Full Changelog: jdx/mise@v2026.3.2...v2026.3.3

v2026.3.2: : Local-scoped upgrades, config-based quiet/silent, and redaction fixes

Compare Source

A small release that adds a --local flag for scoping outdated and upgrade to project-local tools, fixes several bugs around env var redaction, Tera template rendering in prepare, and task output configuration, and corrects a regression in the standalone installer.

Added

• --local flag for outdated and upgrade commands -- You can now run mise upgrade --local or mise outdated --local to restrict operations to tools defined in project-local config files (e.g., mise.toml), skipping anything from the global config (~/.config/mise/config.toml). This is useful when you have separate workflows for managing global vs. project-local tool versions. #​8451 by @​malept

  # Only upgrade tools defined in the local mise.toml
  mise upgrade --local
  
  # Only show outdated tools from the local config
  mise outdated --local

• tinygo added to the registry -- TinyGo is now available via mise use tinygo, using the aqua backend. #​8446 by @​artemklevtsov

Fixed

• task.output config setting now works for quiet/silent modes -- Setting task.output = "quiet" or task.output = "silent" in mise.toml was not suppressing mise's own output during task runs. Only the MISE_TASK_OUTPUT environment variable worked. Both approaches now behave identically. #​8445 by @​my1e5

• Redactions applied correctly when tools = true and redact = true are combined -- Environment variables with both tools = true and redact = true were not being redacted in task output because the tools-only code path collected redactions but never registered them with the global redactor. Secret values now correctly appear as [redacted]. #​8449 by @​jdx

• Tera templates rendered in [prepare.*.env] values -- Tera template expressions like "{{env.MY_VAR}}" in prepare provider env blocks were being passed as literal strings instead of being rendered. They are now evaluated with the full toolset environment available in the template context. #​8450 by @​jdx

• Standalone installer tar zstd version check regex fixed (again) -- A follow-up fix to the regex repair in v2026.3.1: a missing escape on the opening parenthesis caused grep: Unmatched ) or \) errors. The regex is now fully correct. #​8453 by @​chadlwilson

Full Changelog: jdx/mise@v2026.3.1...v2026.3.2

v2026.3.1: : Bug fixes for tasks, Swift, Julia, and installer

Compare Source

A small bug-fix release that corrects task scheduling behavior for depends_post, fixes Julia version resolution, resolves Swift installation failures on some macOS environments, and repairs the standalone installer's tar version detection.

Fixed

• depends_post tasks no longer run when a pre-dependency fails -- Previously, if a task in depends failed before the main task started, depends_post cleanup tasks would still execute. This happened because the scheduler checked whether the parent task was scheduled rather than whether it actually executed. Now depends_post tasks are correctly skipped when the main task never ran due to a pre-dependency failure. They still run as expected when the main task itself fails. #​8426 by @​jdx

• Julia version listing no longer crashes with MISE_USE_VERSIONS_HOST=0 -- The Julia registry entry's version_expr used a filter() predicate with a bare # variable, which the expr-lang evaluator treated as an undefined variable. Wrapping the predicate in {...} closure braces fixes the syntax so mise ls-remote julia works correctly when fetching versions directly from the upstream JSON endpoint. #​8420 by @​jdx

• Swift install fallback to system pkgutil on macOS -- On some macOS environments, pkgutil is not found on the PATH during Swift installation. The Swift backend now falls back to /usr/sbin/pkgutil (the standard system location) when which pkgutil fails. #​8435 by @​mackwic

• Standalone installer tar zstd version check fixed -- The regex used to detect whether the system tar supports zstd was broken -- unescaped parentheses and pipes caused grep to match nothing. The regex is now properly escaped so tar version 1.31+ is correctly detected, enabling zstd-compressed archive downloads. #​8430 by @​autarch

New Contributors

• @​autarch made their first contribution in #​8430
• @​mackwic made their first contribution in #​8435

Full Changelog: jdx/mise@v2026.3.0...v2026.3.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.