fix(cli-tools): update cli-tools

[ppat-self-hosted-renovate-bot]

This PR contains the following updates:

Package	Update	Change
bitwarden/clients	minor	v2025.11.0 -> v2025.12.0
jdx/mise	patch	v2025.12.0 -> v2025.12.12
twpayne/chezmoi	patch	v2.68.0 -> v2.68.1

---

Release Notes

bitwarden/clients (bitwarden/clients)

v2025.12.0: CLI v2025.12.0

Compare Source

• Multiple improvements to policy enforcement and synchronization
• Enhanced security with automatic KDF upgrades and updated dependencies
• Various under-the-hood performance and stability improvements

jdx/mise (jdx/mise)

v2025.12.12

Compare Source

🚀 Features

• (backend) add version timestamps for spm, conda, and gem backends by @​jdx in #​7383
• (backend) add security features to github backend by @​jdx in #​7387
• (ruby) add GitHub attestation verification for precompiled binaries by @​jdx in #​7382

🐛 Bug Fixes

• (aqua) improve security feature detection by @​jdx in #​7385
• (github) use version_prefix when fetching release for SLSA verification by @​jdx in #​7391

🚜 Refactor

• (vfox) remove submodules, embed plugins directly by @​jdx in #​7389

🧪 Testing

• (registry) add final ci job as merge gate by @​jdx in #​7390
• split unit job to speed up macOS CI by @​jdx in #​7388

v2025.12.11

Compare Source

🚀 Features

• (alias) rename alias to tool-alias, add shell-alias command by @​jdx in #​7357
• (upgrade) display summary of upgraded tools by @​jdx in #​7372
• (vfox) embed vfox plugin Lua code in binary by @​jdx in #​7369

🐛 Bug Fixes

• (aqua) add start_operations for progress reporting by @​jdx in #​7354
• (github) improve asset detection for distro-specific and Swift artifacts by @​jdx in #​7347
• (github) clean up static_helpers.rs and fix archive bin= option by @​jdx in #​7366
• (http) add start_operations for progress reporting by @​jdx in #​7355
• (lockfile) place lockfile alongside config file by @​jdx in #​7360
• (progress) add start_operations to core plugins by @​jdx in #​7351
• (ruby-install) Use ruby_install_bin to update by @​calebhearth in #​7350
• (rust) add release_url for rust versions by @​jdx in #​7373
• (schema) add tool_alias, mark alias as deprecated by @​SKalt in #​7358
• (toolset) filter tools by OS in list_current_versions by @​jdx in #​7356
• (ubi) only show deprecation warning during installation by @​jdx in #​7380
• (ui) remove noisy "record size" message during install by @​jdx in #​7381
• update mise-versions URL to use /tools/ prefix by @​jdx in #​7378

🚜 Refactor

• (backend) unified AssetMatcher with checksum fetching by @​jdx in #​7370
• (backend) deprecate ubi backend in favor of github by @​jdx in #​7374
• (toolset) decompose mod.rs into smaller modules by @​jdx in #​7371

🧪 Testing

• (e2e) fix and rename ubi and vfox_embedded_override tests by @​jdx in 052ea40

📦 Registry

• add vfox-gcloud backend for gcloud by @​jdx in #​7349
• convert amplify to use github backend by @​jdx in #​7365
• add github backend for djinni tool by @​jdx in #​7363
• switch glab to native gitlab backend by @​jdx in #​7364
• add s5cmd by @​jdx in #​7376

Chore

• (registry) disable flaky tests for gitu and ktlint by @​jdx in 64151cb
• resolve clippy warnings and add stricter CI check by @​jdx in #​7367
• suppress dead_code warnings in asset_matcher module by @​jdx in #​7377

New Contributors

• @​calebhearth made their first contribution in #​7350

v2025.12.10

Compare Source

🐛 Bug Fixes

• (backend) fix fuzzy_match_filter regex for vendor-prefixed versions by @​jdx in #​7332
• (backend) use backend delegation for install-time option filtering by @​jdx in #​7335
• (duration) support calendar units in relative durations for --before flag by @​Copilot in #​7337
• (gem) improve shebang compatibility for precompiled Ruby by @​jdx in #​7336
• (gem) handle RubyGems polyglot shebang format by @​jdx in #​7340
• (pipx) use minor version symlink for venv Python by @​jdx in #​7339
• (registry) prefer claude-code latest over stale stable by @​jdx in #​7334
• (upgrade) only check specified tools when upgrading with tool args by @​jdx in #​7331

📚 Documentation

• Revise alias example for task execution by @​azais-corentin in #​7338

v2025.12.9

Compare Source

🚀 Features

• (aqua) add tuist aqua backend by @​jdx in #​7323
• (ls-remote) add release_url to VersionInfo for --json output by @​jdx in #​7322
• (prepare) add mise prepare command for dependency preparation by @​jdx in #​7281
• (registry) add aqua backend for zigmod by @​jdx in #​7319

🐛 Bug Fixes

• (e2e) fix flaky test_prepare go provider test by @​jdx in 0e2ef73
• (go) restore git ls-remote for version listing by @​jdx in #​7324

📦 Registry

• use github backend for sourcery by @​jdx in #​7327
• use github backend for swiftgen by @​jdx in #​7326

v2025.12.8

Compare Source

🚀 Features

• (conda) add dependency resolution for conda packages by @​jdx in #​7280
• (go) add created_at support to ls-remote --json by @​jdx in #​7305
• (hook-env) add hook_env.cache_ttl and hook_env.chpwd_only settings for NFS optimization by @​jdx in #​7312
• (hooks) add MISE_TOOL_NAME and MISE_TOOL_VERSION to preinstall/postinstall hooks by @​jdx in #​7311
• (shell_alias) add shell_alias support for cross-shell aliases by @​jdx in #​7316
• (tool) add security field to mise tool --json by @​jdx in #​7303
• add --before flag for date-based version filtering by @​jdx in #​7298

🐛 Bug Fixes

• (aqua) support cosign v3 bundle verification by @​jdx in #​7314
• (config) use correct config_root in tera context for hooks by @​jdx in #​7309
• (nu) fix nushell deactivation script on Windows by @​fu050409 in #​7213
• (python) apply uv_venv_create_args in auto-venv code path by @​jdx in #​7310
• (shell) escape exe path in activation scripts for paths with spaces by @​jdx in #​7315
• (task) parallelize exec_env loading to fix parallel task execution by @​jdx in #​7313
• track downloads for python and java by @​jdx in #​7304
• include full tool ID in download track by @​jdx in #​7320

📚 Documentation

• Switch postinstall code to be shell-agnostic by @​thejcannon in #​7317

🧪 Testing

• (e2e) disable debug mode by default for windows-e2e by @​jdx in #​7318

New Contributors

• @​fu050409 made their first contribution in #​7213

v2025.12.7

Compare Source

🚀 Features

• (java) add created_at support to ls-remote --json by @​jdx in #​7297
• (ls-remote) add created_at timestamps to ls-remote --json for more backends by @​jdx in #​7295
• (ls-remote) add created_at timestamps to ls-remote --json for core plugins by @​jdx in #​7294
• (registry) add --json flag to registry command by @​jdx in #​7290
• (ruby) add created_at timestamps to ls-remote --json by @​jdx in #​7296

🐛 Bug Fixes

• (spm) recursively update submodules after checkout by @​JFej in #​7292
• prioritize raw task output over task_output setting by @​skorfmann in #​7286

New Contributors

• @​skorfmann made their first contribution in #​7286
• @​JFej made their first contribution in #​7292

v2025.12.6

Compare Source

🚀 Features

• add anonymous download tracking for tool popularity stats by @​jdx in #​7289

🐛 Bug Fixes

• add --compressed flag to curl for Swift GPG keys by @​jdx in 7bc1273

📚 Documentation

• add Versions link to nav bar by @​jdx in #​7283
• add mise-tools link to nav bar by @​jdx in #​7285

v2025.12.5

Compare Source

🚀 Features

• (ls-remote) add --json flag with created_at timestamps by @​jdx in #​7279

🐛 Bug Fixes

• (config) respect MISE_CONFIG_DIR when set to non-default location by @​jdx in #​7271
• (http) move http-tarballs from cache to data directory by @​jdx in #​7273
• (pipx) expand wildcards in install command for backend tools by @​jdx in #​7275
• (tasks) position-based flag parsing for mise run by @​jdx in #​7278
• (tera) handle empty strings in path filters by @​jdx in #​7276
• (vfox) make mise_env and mise_path hooks optional by @​jdx in #​7274

📚 Documentation

• (ruby) add precompiled binaries documentation by @​jdx in #​7269

v2025.12.4

Compare Source

🚀 Features

• (copr) add Fedora 43 support by @​jdx in #​7265
• (ruby) add precompiled binary support by @​jdx in #​7263

v2025.12.3

Compare Source

🚀 Features

• (ui) add color_theme setting for light terminal support by @​bishopmatthew in #​7257

🐛 Bug Fixes

• (node) add newlines between GPG keys in fetch script by @​jdx in #​7262
• (run) truncate task description to first line in run selector by @​jdx in #​7256
• unset -f bash functions by @​agriffis in #​7072

📚 Documentation

• fix type of mise_env in templates by @​risu729 in #​7261

🧪 Testing

• add empty secret redaction test by @​risu729 in #​7260

📦️ Dependency Updates

• update ghcr.io/jdx/mise:copr docker digest to af06edf by @​renovate[bot] in #​7245
• update ghcr.io/jdx/mise:alpine docker digest to 3ca5ebd by @​renovate[bot] in #​7244
• update ghcr.io/jdx/mise:rpm docker digest to bdc5d0d by @​renovate[bot] in #​7247
• update ghcr.io/jdx/mise:deb docker digest to f73d7ef by @​renovate[bot] in #​7246
• update mcr.microsoft.com/devcontainers/rust:1 docker digest to 884de39 by @​renovate[bot] in #​7249
• update jdx/mise-action digest to 146a281 by @​renovate[bot] in #​7248

Chore

• (registry) retry only failed tools by @​risu729 in #​7251

New Contributors

• @​agriffis made their first contribution in #​7072
• @​bishopmatthew made their first contribution in #​7257

v2025.12.2

Compare Source

🐛 Bug Fixes

• (node) fetch GPG keys from nodejs/release-keys repo by @​jdx in #​7242
• (release) run fetch-gpg-keys before build by @​jdx in 2608caf
• (tasks) disable ctrl-c exit behavior during mise run by @​jdx in #​7232

📦 Registry

• added werf by @​tony-sol in #​7230

v2025.12.1

Compare Source

🚀 Features

• (npm) support pnpm as a package manager for npm backend by @​risu729 in #​7214
• (tool-stubs) add --bootstrap flag to mise generate tool-stub by @​jdx in #​7203

🐛 Bug Fixes

• (alpine) increase alpine release timeout to 60 minutes by @​jdx in #​7188
• (bun) use x64-baseline for aarch64 on Windows by @​roele in #​7190
• (tools) allow using env vars in tools by @​antonsergeyev in #​7205
• add cfg(feature = "self_update") to statics only used by that feature by @​jdx in #​7185

📚 Documentation

• Update registry.md by @​jdx in ad11ad1

📦️ Dependency Updates

• update ghcr.io/jdx/mise:alpine docker digest to 2909cce by @​renovate[bot] in #​7196
• update fedora:43 docker digest to 6cd815d by @​renovate[bot] in #​7195
• update ghcr.io/jdx/mise:deb docker digest to 1893530 by @​renovate[bot] in #​7198
• update ghcr.io/jdx/mise:copr docker digest to 0447a85 by @​renovate[bot] in #​7197

📦 Registry

• add Supabase CLI to registry.toml by @​bodadotsh in #​7206
• add cmake aqua backend by @​mangkoran in #​7186

New Contributors

• @​antonsergeyev made their first contribution in #​7205
• @​bodadotsh made their first contribution in #​7206

twpayne/chezmoi (twpayne/chezmoi)

v2.68.1

Compare Source

Changelog

Fixes

• 61250b0 fix: Fix edit-encrypted command for files in subdirectories
• 2a22e9b fix: Fix type of .chezmoi.sourceFile

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.