image(deps): update image builds

[renovate]

This PR contains the following updates:

Package	Update	Change
astral-sh/uv	patch	0.12.5 → 0.12.6
debian (source)	patch	bookworm-20260803 → bookworm-20260824
debian (source)	patch	trixie-20260803 → trixie-20260824
jdx/mise	patch	2026.8.11 → 2026.8.14

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.12.6

Compare Source

Released on 2026-08-25.

Python

• Update CPython to use OpenSSL 3.5.8 and libffi 3.4.8 #​21295)

Enhancements

• Report cache-cleaning space savings from filesystem block allocation and avoid double-counting hard links (#​21261)
• Limit warnings about unbounded uv_build requirements to source-distribution builds (#​21078)
• Display byte counts below 1 KiB without a fractional part (#​21237)

Preview features

• Add uv workspace metadata --sync --exact to remove packages outside the selected resolution (#​21117)
• Add the artifact-hash-filtering preview feature to make uv pip compile --generate-hashes honor --only-binary and --no-binary (#​21235)
• Respect package-specific exclude-newer cutoffs when uv check selects its ty executable (#​21227)
• Preserve virtual-environment hints from tar-codec source-distribution errors when the base interpreter is outside a bin directory (#​21146)

Performance

• Enable profile-guided optimization for Linux x86-64 release binaries (#​21001)
• Enable profile-guided optimization for Windows x86-64 release binaries (#​21003)
• Enable profile-guided optimization for macOS ARM64 release binaries (#​21002)
• Enable profile-guided optimization for Linux ARM64 release binaries (#​21004)
• Speed up syncing projects with many activated conflict items by reusing their encoded representation (#​21148)

Bug fixes

• Allow explicit uv build and non-editable first-party workspace packages when no-build is enabled (#​21294)
• Reuse configured index credentials during uv tool upgrade when the tool receipt references the same index (#​21275)
• Ensure full 40-character Git commit pins resolve to the requested object instead of a SHA-named branch (#​21224)
• Prevent TLS segfaults in riscv64 musl release binaries (#​21158)
• Preserve dependencies selected by recursive extras when markers mix production and extra conditions (#​21181)
• Preserve version constraints from transitively referenced recursive extras (#​21209)
• Resolve repository-relative Git archive dependencies inside the checkout during the initial uv sync (#​21264)
• Return an error instead of panicking when a bearer token cannot be encoded as an HTTP header (#​21282)
• Do not misclassify package URLs ending in .py as local script paths (#​21144)
• Use directory creation times consistently across libc implementations for directory cache-keys entries (#​21137)
• Promote human-readable sizes to the next unit at rounding boundaries (#​21136)

Other changes

• Add Python 3.15 release-candidate Docker images (#​21293)
• Raise the minimum supported Rust version to 1.96 and update the repository toolchain to Rust 1.98 (#​21258)

jdx/mise (jdx/mise)

v2026.8.14

Compare Source

🐛 Bug Fixes

• (http) remove the extraction temp dir when extraction fails by @​Marukome0743 in #​12420
• (npm) keep aube settings out of npmrc by @​jdx in #​12425
• (npm) intercept aube node-gyp bootstrap trampoline by @​jdx in #​12429
• (prune) remove trusted config links whose target is gone on Windows by @​JamBalaya56562 in #​12418

📚 Documentation

• add sponsor logos to readme by @​jdx in #​12436

📦️ Dependency Updates

• update ghcr.io/jdx/mise:rpm docker digest to a7ada36 by @​renovate[bot] in #​12432
• update ghcr.io/jdx/mise:alpine docker digest to b6314a4 by @​renovate[bot] in #​12430
• update rust crate aube-registry to v2.2.0 by @​renovate[bot] in #​12433
• update ghcr.io/jdx/mise:deb docker digest to baffc30 by @​renovate[bot] in #​12431

Chore

• (sponsors) replace 37signals with omacom foundation by @​jdx in #​12435

v2026.8.13

Compare Source

🚀 Features

• (bootstrap) add skip-dirty repo updates by @​jdx in #​12364
• (config) support mise/conf.d fragments by @​jdx in #​12395
• (task) add task discovery exclusions by @​jdx in #​12366

🐛 Bug Fixes

• (backend) resolve latest from system installs by @​jdx in #​12406
• (brew) stage bare cask pkg downloads by @​jdx in #​12371
• (brew) extract nested cask archives by @​jdx in #​12373
• (cli) default to an editor Windows has, and name the one that failed by @​JamBalaya56562 in #​12375
• (completion) restore dynamic completions by @​jdx in #​12376
• (completion) preserve runtime path fallback by @​jdx in #​12379
• (config) name the config file once in a TOML parse error by @​JamBalaya56562 in #​12329
• (config) report an unparseable settings file once, through the logger by @​JamBalaya56562 in #​12327
• (config) say what a backslash does when a config fails to parse by @​JamBalaya56562 in #​12330
• (config) truncate picker descriptions safely by @​jdx in #​12422
• (elvish) separate the prepended entry from the existing PATH by @​NgoQuocViet2001 in #​12362
• (env) strip a byte-order mark before parsing an env file by @​JamBalaya56562 in #​12320
• (env) preserve command environment overrides by @​jdx in #​12390
• (generate) name every file a generator writes by @​JamBalaya56562 in #​12333
• (generate) name a task stub after the task, not its file by @​JamBalaya56562 in #​12341
• (github) skip provenance API calls when lockfile has checksum but no provenance by @​effati in #​12377
• (lockfile) include monorepo root requests in lockfile maintenance by @​pikeas in #​12382
• (lockfile) attribute each new version to its own request source by @​pikeas in #​12381
• (nushell) unset __MISE_SESSION on deactivate by @​NgoQuocViet2001 in #​12361
• (pipx) track latest git revisions by @​jdx in #​12407
• (pipx) reject unavailable configured executable by @​jdx in #​12416
• (prune) remove tracked configs that cannot be a config file by @​Marukome0743 in #​12380
• (self-update) do not fail the command when updating plugins fails by @​JamBalaya56562 in #​12363
• (task) say which sandbox paths do not exist yet by @​Marukome0743 in #​12309
• (task) flush a keep-order buffer instead of discarding it by @​Marukome0743 in #​12370
• (task) anchor injected tasks at their parent's keep-order slot by @​Marukome0743 in #​12397
• (task) stop dropping #MISE header keys that need quoting by @​Marukome0743 in #​12415
• (task) reject negative template argument bounds by @​jdx in #​12421
• (trust) refuse a path that does not exist instead of trusting its parent by @​JamBalaya56562 in #​12372
• (ui) stop padding the last table column past its content by @​JamBalaya56562 in #​12334

📚 Documentation

• (security) update paranoid mode behavior by @​jdx in #​12394

🧪 Testing

• (config) assert the tracking entry itself is removed by @​Marukome0743 in #​12396
• make e2e harness compatible with BSD env by @​Marukome0743 in #​12357
• avoid pipefail race in trust e2e test by @​Marukome0743 in #​12358

📦️ Dependency Updates

• lock file maintenance by @​renovate[bot] in #​12356
• bump usage to 6.4.0 by @​jdx in #​12392
• update ghcr.io/jdx/mise:rpm docker digest to 28f006d by @​renovate[bot] in #​12411
• update dependency go to v1.26.6 by @​renovate[bot] in #​12412
• update ghcr.io/jdx/mise:alpine docker digest to 0c43677 by @​renovate[bot] in #​12409
• update docker/dockerfile:1 docker digest to ecfaec9 by @​renovate[bot] in #​12408
• update ghcr.io/jdx/mise:deb docker digest to f220a26 by @​renovate[bot] in #​12410
• update jdx/mise-action action to v4.2.5 by @​renovate[bot] in #​12413
• update rust crate demand to v2.1.0 by @​renovate[bot] in #​12423

📦 Registry

• add mr-boxington by @​jdx in #​12384
• add ori by @​jdx in #​12388
• add hey-cli by @​jdx in #​12387
• add playwright by @​jdx in #​12385
• add ghui by @​jdx in #​12386
• use aqua for claude-code on windows by @​Marukome0743 in #​12399

📦 Aqua Registry Updates

New Packages (6)

• crossplane/cli
• jdx/fnox
• rafaelespinoza/godfish
• re-taro/tsmcp
• skyhook-io/radar
• zwasm/zwasm

Updated Packages (2)

• temporalio/temporal
• wasm-bindgen/wasm-pack

v2026.8.12

Compare Source

🚀 Features

• (bootstrap) add package plugin uninstall support by @​jdx in #​12332

🐛 Bug Fixes

• (brew-cask) recognize Homebrew-owned casks by @​donbeave in #​12346
• (cli) report a cd target it cannot enter instead of panicking by @​JamBalaya56562 in #​12314
• (config) skip disabled idiomatic tracked configs by @​xqm32 in #​12194
• (config) keep comments when saving from mise edit by @​Marukome0743 in #​12319
• (config) strip a byte-order mark before reading a version file by @​JamBalaya56562 in #​12325
• (doctor) report installs that provide no executables by @​Marukome0743 in #​12321
• (env) say why an age SSH identity could not be used by @​Marukome0743 in #​12339
• (env) name the key and file behind an unexpanded $VAR by @​Marukome0743 in #​12316
• (go) don't hand go install a GOROOT from another Go by @​Marukome0743 in #​12342
• (task) treat a SIGINT-killed child as an interruption by @​Marukome0743 in #​12323
• (task) preserve string type for usage value flags by @​jdx in #​12355
• (tasks) tell Windows users why a task file was skipped by @​JamBalaya56562 in #​12324
• (tool-stub) keep env_with_path instead of rebuilding PATH by @​tmkx in #​12322
• (watch) restore the controlling terminal from a drop guard by @​Marukome0743 in #​12328

🚜 Refactor

• (cli) keep one copy of the task-flag escape rule by @​JamBalaya56562 in #​12343

📚 Documentation

• (tasks) point extensionless pwsh tasks at MISE_TASK_DIR by @​JamBalaya56562 in #​12313

📦️ Dependency Updates

• update rust crate aube-registry to v2.1.0 by @​renovate[bot] in #​12348
• bump aube to 2.1.0 by @​jdx in #​12351
• bump usage to 6.2.0 by @​jdx in #​12354

📦 Registry

• fix usage version test by @​jdx in #​12349
• install oc from a channel directory by @​Marukome0743 in #​12326

Chore

• (ci) use github runners for fork prs by @​jdx in #​12345
• (ci) prevent cache warmer starvation by @​jdx in #​12350

New Contributors

• @​tmkx made their first contribution in #​12322

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[nozaq]

The uv upgrade is currently blocked because the checksum files for v0.12.6 are missing from releases.astral.sh and return 404 for all variants.

astral-sh/uv#21302

[nozaq]

CI failures come from the already published base image. This should be fixed by today's release.