…io (#6926)

Currently, mise's snap package page on snapcraft.io does not have
sufficient information: https://snapcraft.io/mise

I should have set those information in snapcraft.yaml.
This PR adds a bit more detailed information in
https://snapcraft.io/mise.

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

This pull request adds a new tool entry to the `registry.toml` file,
expanding the available tools for macOS users.

New tool addition:

* Added the `xcsift` tool with a backend of `ubi:ldomaradzki/xcsift`,
including a description, OS restriction to macOS, and a version test
command.

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

https://github.com/google/magika
https://github.com/xxh/xxh

~~https://github.com/pete911/certinfo~~ (dropped)

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

This PR contains the following updates:

| Update | Change |
|---|---|
| lockFileMaintenance | All locks refreshed |

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on monday" in timezone
America/Chicago, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/jdx/mise).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

# Summary

Current install script is creating 2 temporary folders to download and
extract the tarball. When using wget, it also creates 2 files for the
log (one of witch is never used).
On an amd64 machine, that is 23MB of wasted space.

This PR remove those files after use.

# Test plan

Tested manually in a blank Debian container with just curl/wget added

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Cleans up temporary download/extract directories and wget log files,
refactoring download flow to use passed dirs and removing unused temps.
> 
> - **Standalone installer (`packaging/standalone/install.envsubst`)**:
>   - Clean up temporary resources:
> - Remove temporary download directory and extraction directory after
use.
>     - Delete temporary `wget` stderr log file.
>   - Refactor `download_file`:
> - Accepts `download_dir` parameter; writes file there instead of
creating its own temp dir.
>   - Extraction flow:
>     - Use explicit `extract_dir` for untar, enabling cleanup.
>   - Minor: remove unused temp file creation in checksum fetch path.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
b4baaa0. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

…g task (#6955)

## Summary

Fixes the issue where `mise run --cd <dir> <task> --help` would execute
the task with `--help` as an argument instead of displaying help for the
task.

## Problem

When running commands like:
```bash
mise run --cd services/coder/templates push-devbox --help
```

The `--help` flag was being passed to the task script as an argument,
causing the task to run instead of showing help. This was particularly
problematic for tasks without usage specifications (no `arg()` calls).

## Solution

- Intercept `--help` and `-h` flags in `Run::run()` before task
execution
- Use `usage::docs::cli::render_help()` to consistently display task
help
- Works for both `mise run task --help` and naked runs like `mise task
--help`

## Changes

1. **Modified `src/cli/run.rs`**:
   - Added early check for `--help`/`-h` in args before task execution
   - Strip these flags from args and resolve the task
   - Render help using the usage library's help renderer

2. **Added `e2e/tasks/test_task_help_with_cd`**:
   - Tests `--help` with `--cd` flag
   - Tests both tasks with and without usage specifications
   - Verifies help is shown instead of task execution

3. **Updated `e2e/tasks/test_task_help`**:
   - Reflects new behavior where `--help` always shows help
   - Updated assertions for tasks without usage specs

## Behavior Changes

**Before**: Tasks without usage specs would pass `--help` to the script
```bash
$ mise run build --help
[build] $ echo "Building project" --help
Building project --help
```

**After**: All tasks show help when `--help` is provided
```bash
$ mise run build --help
Usage: build

$ mise run deploy --help
Usage: deploy <env>

Arguments:
  <env>
```

## Testing

- ✅ Existing tests pass with updated assertions
- ✅ New test covers `--cd` flag usage
- ✅ Lint checks pass

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Intercepts --help/-h in `mise run` to display task help (respecting
`--` passthrough), adds `--cd` e2e coverage, and updates help-related
tests.
> 
> - **CLI run behavior**:
> - In `src/cli/run.rs`, detect `--help`/`-h` in `self.args` before
execution (excluding args after `--`), strip them, resolve the task, and
render help via `usage::docs::cli::render_help`; fallback to run command
help if no task is found.
> - **Tests**:
> - Add `e2e/tasks/test_task_help_with_cd` to verify `mise run --cd
<dir> <task> --help`, passthrough behavior with `--`, and tasks
with/without usage specs.
> - Update `e2e/tasks/test_task_help` to assert help is shown for tasks
(including extra args) and to clarify `--` passes `--help` to the task
script.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
a2161bf. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude <noreply@anthropic.com>

)

## Summary

Adds a comprehensive `mise task validate` command that validates tasks
for common errors and issues.

## Validation Checks

The command performs 11 types of validation:

1. **Circular Dependencies** - Detects dependency cycles between tasks
2. **Missing Task References** - Finds dependencies that reference
non-existent tasks
3. **Usage Spec Parsing** - Validates #USAGE and #MISE directives
4. **Timeout Format** - Checks timeout values are valid durations
5. **Alias Conflicts** - Detects duplicate aliases across tasks
6. **File Existence** - Verifies file-based tasks exist and warns if not
executable
7. **Directory Templates** - Validates directory paths and template
rendering
8. **Shell Commands** - Checks shell executables exist (for absolute
paths)
9. **Source Glob Patterns** - Validates glob patterns for task sources
10. **Output Glob Patterns** - Validates glob patterns for task outputs
11. **Run Entry Validation** - Ensures tasks reference valid
dependencies and have content

## Features

- **Human-readable output** with colored error/warning indicators
- **JSON output format** for CI/CD integration (`--json`)
- **Filter by severity** (`--errors-only`)
- Validate specific tasks or all tasks
- Support for hidden tasks (`--hidden`)
- Smart detection of meta-tasks (tasks with only dependencies)

## Exit Codes

- `0`: All validations passed (or only warnings)
- `1`: One or more errors found

## Examples

```bash
# Validate all tasks
mise task validate

# Validate specific tasks
mise task validate build test

# JSON output for CI integration
mise task validate --json

# Only show errors (skip warnings)
mise task validate --errors-only
```

## Test Coverage

- Comprehensive e2e test suite (`e2e/tasks/test_task_validate`)
- Tests all validation rules
- Tests output formats (human-readable and JSON)
- Tests filtering options

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Adds `mise tasks validate` to validate tasks (human/JSON output,
errors-only), with docs, manpage, completions, and e2e tests.
> 
> - **CLI/Backend**:
> - Implement `src/cli/tasks/validate.rs` and wire into
`src/cli/tasks/mod.rs` as `validate` subcommand.
> - Performs 11 validations (circular deps, missing refs, usage parsing,
timeout, alias conflicts, file/dir, shell, glob patterns, run entries)
with human and `--json` output and `--errors-only` filter.
> - **Docs/Specs**:
> - Add `docs/cli/tasks/validate.md` and list command in
`docs/cli/index.md`, `docs/cli/tasks.md`.
>   - Update man page `man/man1/mise.1` and usage spec `mise.usage.kdl`.
>   - Expose in VitePress command map `docs/.vitepress/cli_commands.ts`.
> - **Completions**:
> - Update Fig spec `xtasks/fig/src/mise.ts` to include `tasks validate`
with options and args.
> - **Tests**:
> - Add e2e coverage `e2e/tasks/test_task_validate` exercising success,
failures, JSON output, and flags.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
6e376f9. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

The previous example is no longer available, so it was replaced by an
arbitrary other Go package.

Signed-off-by: nachtjasmin <nachtjasmin@posteo.de>

…tivate (#6886)

- mise assumes itself to be activated due to dependence upon __MISE_DIFF
env var.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> PowerShell deactivate now removes `__MISE_DIFF` (not `__MISE_WATCH`),
with snapshot updated accordingly.
> 
> - **Shell (pwsh)**:
> - Update `deactivate()` in `src/shell/pwsh.rs` to remove
`Env:/__MISE_DIFF` instead of `Env:/__MISE_WATCH`.
> - Sync snapshot
`src/shell/snapshots/mise__shell__pwsh__tests__deactivate.snap` to
expect `__MISE_DIFF` removal.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
872efec. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

…ncies (#6894)

Add --skip-deps flag to run specified tasks, skipping dependencies

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Adds `--skip-deps` to `mise run` and `mise watch` plus a
`task_skip_depends` setting/env to execute only specified tasks,
skipping all dependencies.
> 
> - **CLI**:
> - `mise run`: new `--skip-deps` flag; respects
`MISE_TASK_SKIP_DEPENDS` and `settings.task_skip_depends`.
> - `mise watch`: supports `--skip-deps` and forwards it to `mise run`.
> - **Task Resolution/Execution**:
> - Plumbs `skip_deps` through CLI -> task list -> executor; when
enabled, clears `depends`, `depends_post`, and `wait_for` for target and
injected tasks.
> - `get_task_lists` gains `only` param to strip dependencies when
requested.
> - **Config/Schema**:
> - Adds `settings.task_skip_depends` (boolean) and
`MISE_TASK_SKIP_DEPENDS` env; updates `schema/mise.json` and
`settings.toml`.
> - **Docs/UX**:
> - Updates help pages (`docs/cli/run.md`, `docs/cli/tasks/run.md`,
`docs/cli/watch.md`), manpage, usage spec (`mise.usage.kdl`), and Fig
completion to include `--skip-deps`.
> - **Tests**:
> - New e2e tests: `test_task_skip_deps` and `test_task_watch_skip_deps`
validate run/watch behavior skipping dependencies.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
5c8ec61. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: jdx <216188+jdx@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

<!-- CURSOR_SUMMARY -->
> [!NOTE]
> <sup>[Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) is
generating a summary for commit
ee55dd7. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

## Summary
Previously, running `mise help` (without `--help`) would fail with "no
tasks defined" error when no tasks were configured in the current
directory. This happened because the help argument was being treated as
a task name, triggering config loading and task resolution.

This PR fixes the issue by adding special handling for the "help"
argument in two places:
1. In the preprocessor, to prevent "help" from being converted to "run
help"
2. In `get_command()`, to exit early with help output for help-related
args

Now `mise help`, `mise --help`, and `mise -h` all work consistently,
regardless of whether tasks are configured.

## Test plan
- Added new e2e test `e2e/cli/test_help_without_tasks` that verifies all
three help variants work in a directory without tasks
- All existing unit and e2e tests pass
- Manually tested `mise help`, `mise --help`, and `mise -h` in
directories with and without tasks

Fixes #6947

---

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Treat `help`, `--help`, and `-h` as help invocation (not tasks) and
add an e2e test validating behavior without tasks.
> 
> - **CLI**:
> - Preprocessor: skip injecting `run` when first non-flag arg is
`help`, `-h`, or `--help` in `src/cli/mod.rs`.
> - Command resolution: if `TASK` equals `help`, `-h`, or `--help`,
print help and exit with code 0.
> - **Tests**:
> - Add `e2e/cli/test_help_without_tasks` to verify `mise help`, `mise
--help`, and `mise -h` work in a directory without tasks.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
c817e84. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: Claude <noreply@anthropic.com>

Initial draft POC in relation to #5325. Switches from using the rubygems
API directly to the `gem` command in order to leverage the `~/.gemrc`
gem sources configuration.

---------

Co-authored-by: jdx <216188+jdx@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

### 📦 Registry

- add xcsift by @alexey1312 in
[#6923](#6923)
- add tools: magika & xxh by @IceCodeNew in
[#6909](#6909)
- add aliases to aqua-backend tools by @IceCodeNew in
[#6910](#6910)

### 🚀 Features

- **(tasks)** add `mise task validate` command for task validation by
@jdx in [#6958](#6958)

### 🐛 Bug Fixes

- **(cli)** intercept --help flag to show task help instead of executing
task by @jdx in [#6955](#6955)
- remove temporary files after install by @vmeurisse in
[#6948](#6948)

### 📚 Documentation

- **(snapcraft)** update `summary` & `description` shown in snapcraft.io
by @phanect in [#6926](#6926)
- Change package example in go.md by @nachtjasmin in
[#6862](#6862)
- paranoid mode does not untrust global config by @iloveitaly in
[#6952](#6952)

### 📦️ Dependency Updates

- lock file maintenance by @renovate[bot] in
[#6932](#6932)

### New Contributors

- @iloveitaly made their first contribution in
[#6952](#6952)
- @nachtjasmin made their first contribution in
[#6862](#6862)
- @IceCodeNew made their first contribution in
[#6910](#6910)
- @alexey1312 made their first contribution in
[#6923](#6923)

## 📦 Aqua Registry Updates

#### New Packages (6)

- [`CrociDB/bulletty`](https://github.com/CrociDB/bulletty)
- [`Gaurav-Gosain/tuios`](https://github.com/Gaurav-Gosain/tuios)
- [`ck-zhang/reddix`](https://github.com/ck-zhang/reddix)
- [`hokaccha/spannerdef`](https://github.com/hokaccha/spannerdef)
-
[`lasantosr/intelli-shell`](https://github.com/lasantosr/intelli-shell)
-
[`zerocore-ai/microsandbox`](https://github.com/zerocore-ai/microsandbox)

#### Updated Packages (4)

- [`cue-lang/cue`](https://github.com/cue-lang/cue)
- [`flutter/flutter`](https://github.com/flutter/flutter)
- [`phiresky/ripgrep-all`](https://github.com/phiresky/ripgrep-all)
- [`topgrade-rs/topgrade`](https://github.com/topgrade-rs/topgrade)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> Bump to 2025.11.4 with aqua-registry additions/updates,
dependency/tooling refresh, updated completions/docs, and
packaging/version files.
> 
> - **Release/Versioning**:
> - Bump to `2025.11.4` in `Cargo.toml`, `default.nix`,
`packaging/rpm/mise.spec`, `snapcraft.yaml`, and `README.md`.
> - **Aqua Registry**:
> - *New packages*: `CrociDB/bulletty`, `Gaurav-Gosain/tuios`,
`ck-zhang/reddix`, `hokaccha/spannerdef`, `lasantosr/intelli-shell`,
`zerocore-ai/microsandbox` (owner change + aliases).
> - *Updates*: `cue-lang/cue` (version rules), `flutter/flutter`
(channelized URLs), `phiresky/ripgrep-all` (version/asset rules),
`topgrade-rs/topgrade` (extensive version/asset overrides).
> - **Dependencies/Tooling**:
> - `Cargo.lock`: bump `aws-lc-*`, `hyper 1.8.0`, `indicatif 0.18.3`,
`luajit-src`, `num-bigint-dig`, `crypto-common`, `usage-lib`, etc.
> - `mise.lock`: update `bun`, `cargo-binstall`, `cargo-edit`, `node`,
`pre-commit`, `usage-cli`.
> - **Completions**:
> - Update usage spec cache filenames to
`usage__usage_spec_mise_2025_11_4.spec` in `completions/*`.
> - **Docs**:
> - Add `CHANGELOG.md` entry for `2025.11.4`; bump stars to `21.3k` in
`docs/.vitepress/stars.data.ts`.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
a1e62ee. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->