chore: release 2026.9.2

[mise-en-dev]

🚀 Features

• (backend) apply install_env when resolving and downloading tools by @rabadin in #12777
• (bootstrap) load global config repository with --from-git by @jdx in #12715
• (bootstrap) support absent pacman packages by @jdx in #12716
• (bootstrap) add AUR package manager by @jdx in #12718
• (bootstrap) report selected root declarations by @jdx in #12770
• (brew) evaluate ordinary third-party taps by @jdx in #12774
• (completion) load packslip completions in activated shells by @jdx in #12848
• (packslip) install from a vendor's signed release manifest by @jdx in #12778
• (packslip) shell completions from a tool's packslip by @jdx in #12779
• (packslip) agent skills from a tool's packslip by @jdx in #12780
• (packslip) install only what a trusted stamper lists by @jdx in #12782
• (packslip) pin signers globally and in the lockfile by @jdx in #12783
• (packslip) check declared host requirements before install by @jdx in #12804
• (packslip) resolve latest from verified vendor recommendations by @jdx in #12805
• (packslip) the backend is no longer experimental by @jdx in #12811
• (self-update) allow curated github release sources by @jdx in #12735
• (ssh) add read-only github relay and remote git onboarding by @jdx in #12830

🐛 Bug Fixes

• (activate) translate paths for the calling windows posix shell by @jdx in #12736
• (aqua) handle repository transfers in attestations by @jdx in #12766
• (bootstrap) pin relative config dir during reexec by @jdx in #12721
• (bootstrap) render tera templates in hooks by @jdx in #12727
• (bootstrap) expand tilde in managed file sources by @jdx in #12768
• (brew) say why a tapped install found no API metadata by @Marukome0743 in #12645
• (brew) support all tap formula layouts by @soodoh in #12837
• (completions) include installed plugins in plugin completion by @jdx in #12720
• (config) terminate every newly added .tool-versions line by @dylanpulver in #12740
• (dotfiles) tolerate a stale directory the deeper walk already removed by @vladbisceanu in #12697
• (env) avoid duplicate unset in hook output by @jdx in #12707
• (env) create bootstrap shims for lazy tools when printing the env by @hktitof in #12726
• (github) omit releases with no assets from the version list by @Marukome0743 in #12572
• (github) silence oauth refresh warnings during env export by @jdx in #12855
• (go) resolve private modules via Go by @kejne in #12731
• (go) use loong64 artifact architecture by @jdx in #12767
• (lockfile) drop deferred provenance baseline once auto-lock verifies the upgrade by @jdx in #12825
• (nix) skip macOS sandbox and cask tests in checkPhase by @laozc in #12856
• (npm) support pnpm 12 global installs by @jdx in #12717
• (nushell) preserve PATH list type in activation prelude by @Junaid-PK in #12754
• (oci) preserve paths for reused tool layers by @jdx in #12749
• (packslip) isolate completion resources and bound exec generation by @jdx in #12798
• (packslip) enforce signed list continuity and verified release age by @jdx in #12799
• (packslip) preserve vendor policy across trusted stamps by @jdx in #12802
• (packslip) bound resource output and clean up child processes by @jdx in #12803
• (packslip) ask for a completion at the tab, not at shell startup by @jdx in #12808
• (rust) reconcile incomplete rustup toolchains by @jdx in #12771
• (sandbox) omit SYS_fork/SYS_vfork on aarch64 by @jamescassell in #12807
• (schema) support absent bootstrap packages by @nettlesh in #12785
• (schema) model inline dotfile content by @risu729 in #12738
• (schema) add missing built-in deps providers by @risu729 in #12739
• (shim) match lazy tool names on windows by @jdx in #12699
• (task) prevent symlink loops in task globs by @jdx in #12711
• (task) stop pre-converting PATH for POSIX shells; the shell already does it by @JamBalaya56562 in #12696
• (task) preserve task status when cache audit tracer fails by @jdx in #12769
• (task) accept a single string for sources by @risu729 in #12530
• (vfox) preserve tool name from legacy lockfiles by @jdx in #12745

🚜 Refactor

• (brew-cask) split implementation into modules by @jdx in #12698

📚 Documentation

• (backend) promote packslip to tier 1 and improve guides by @jdx in #12840
• (bootstrap) clarify landing page examples by @jdx in #12713
• (bootstrap) prevent blank guide page by @jdx in #12755
• (cli) improve command help prose and fill gaps by @jdx in #12700
• (config) clarify environments and repair secret setup guides by @jdx in #12862
• (packslip) reorganize backend and resource guides by @jdx in #12809
• (plugins) document ls filtering flags by @jdx in #12724
• (settings) fix stale python.uv_venv_auto deprecation text by @jdx in #12695
• (task) correct examples and reorganize task guides by @jdx in #12861
• improve prose across documentation by @jdx in #12691
• fix content errors across documentation by @jdx in #12693
• promote mr boxington and aube by @jdx in #12701
• preserve code spans when flattening markdown for llms.txt by @jdx in #12704
• redesign landing page around one config file by @jdx in #12708
• add open graph share image by @jdx in #12743
• complete social and search metadata by @jdx in #12806
• generate page-specific social preview images by @jdx in #12832
• link packslip announcement from backend guide by @jdx in #12850
• clarify onboarding and improve website guidance by @jdx in #12859
• refresh website theme and landing page by @jdx in #12860
• regenerate llms index by @jdx in 1fc6677
• make language setup guides project focused and accurate by @jdx in #12864
• make cookbook recipes complete and reproducible by @jdx in #12863

⚡ Performance

• (ci) reuse appliance-local mbx cache by @jdx in #12703
• (shim) skip the mise binary lookup when no lazy tool needs a shim by @jdx in #12742

🧪 Testing

• fix unit-macos link and packslip e2e under the release workflow by @jdx in #12818

📦️ Dependency Updates

• bump self_update to 1.3 to clear quick-xml advisories by @Svector-anu in #12714
• update rust crate sevenz-rust2 to 0.22 by @renovate[bot] in #12656
• update rust crate aube-registry to v2.2.5 by @renovate[bot] in #12752
• update rust crate aube-registry to v2.2.6 by @renovate[bot] in #12753
• update rust crate aube-registry to v2.2.9 by @renovate[bot] in #12757
• bump aube to 2.2.9 by @jdx in #12772
• update rust crate usage-cli to v6.7.0 by @renovate[bot] in #12556
• update rust crate usage-lib to v6.7.1 by @renovate[bot] in #12608
• update rust crate aube to v2.2.10 by @renovate[bot] in #12751
• update rust crate aube-registry to v2.2.10 by @renovate[bot] in #12842
• update rust crate usage-cli to v6.7.1 by @renovate[bot] in #12844
• update rust crate aube-registry to v2.2.11 by @renovate[bot] in #12847
• update rust crate aube to v2.2.11 by @renovate[bot] in #12846
• update rust crate aube-registry to v2.2.12 by @renovate[bot] in #12853
• update rust crate aube to v2.2.12 by @renovate[bot] in #12852
• bump mr-boxington to 1.8.3 by @jdx in #12854

📦 Registry

• use canonical Crossplane CLI package by @jamescassell in #12748
• compile baked registry in release tests by @esteve in #12776
• add packslip by @jdx in #12810
• pin packslip release and index workflows by @jdx in #12841
• support minimum backend versions and adopt packslip by @jdx in #12845

Chore

• (ci) update performance runner image by @jdx in #12712
• (ci) attest release artifacts by @jdx in #12728
• (ci) bump packslip to v1.1.1 by @jdx in #12836
• (release) only run the release PR dry run once auto-merge is enabled by @jdx in #12827
• (release) simplify the packslip job with upstream v1.0.0 fixes by @jdx in #12829
• (render) run markdown-magic non-interactively by @jdx in #12820
• configure Entire search by @jdx in #12773

Ci

• (release) publish a signed packslip with each release by @jdx in #12812
• (release) bump packslip to v1.0.2 by @jdx in #12831
• route mbx caching by runner provider by @jdx in #12705
• restore rust-cache by @jdx in #12723
• enforce conventional commits by @jdx in #12828

Security

• (self-update) require secure release sources by @jdx in #12737

New Contributors

• @soodoh made their first contribution in #12837
• @jamescassell made their first contribution in #12807
• @nettlesh made their first contribution in #12785
• @Junaid-PK made their first contribution in #12754
• @kejne made their first contribution in #12731
• @dylanpulver made their first contribution in #12740
• @Svector-anu made their first contribution in #12714
• @vladbisceanu made their first contribution in #12697

📦 Aqua Registry Updates

New Packages (1)

• rancher-archives/rke

Updated Packages (2)

• charmbracelet/gum
• sharkdp/fd

[greptile-apps]

PR label release disables reviews.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (2)

• chore: release
• chore(main): release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)

Review profile: CHILL

Plan: Team

Run ID: 279fba95-4e4d-49a6-9eb2-54b8fae68ecd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}