Skip to content

Raise the mise floor to 2026.7.8#2984

Draft
jeremy wants to merge 1 commit into
mainfrom
raise-mise-floor
Draft

Raise the mise floor to 2026.7.8#2984
jeremy wants to merge 1 commit into
mainfrom
raise-mise-floor

Conversation

@jeremy

@jeremy jeremy commented Jul 17, 2026

Copy link
Copy Markdown
Member

Track B, Train 1 (fleet mise floor raise, lockstep with https://github.com/basecamp/shipyard/pull/149): this repo's vendored floor pair — min_version in .mise.toml and mise_min_version in bin/setup — bumped 2026.7.5 → 2026.7.8, the first mise containing jdx/mise#11034 (transport-agnostic repo-origin comparison), which Train 2's docker-dev-origin v2 block relies on.

Important

Floor literal is provisional — the ruled floor is the first published release containing 95ca0a7b, and none has published yet (mise's release pipeline fails deterministically on a macos-arm64 PGO mismatch; see the shipyard PR). Re-literal before merge if a later release publishes first, and rerun the release/source audit against that version (tracked in the shipyard PR) — the committed audits bind to 2026.7.8, and a later floor can cross new behavior, including 2026.8.0's unconditional precompiled ruby. Gate 3 (installability by installation on curl/brew/Arch) must pass before any merge, and this PR merges only after the shipyard PR lands.

Operations

Blast radius is pull-time: once this lands, machines below the floor error on every mise invocation in this checkout (shell hook-env, quickhook hooks, editor integration) until upgraded — bin/setup converges them, or one upgrade command per platform. Announce before landing; merge early in a workday.

Evidence

  • test/mise-floor-test --ref ×5 (all five app branches): 61/61 — floor declared correctly here, and the vendored floor/upgrade logic remains byte-identical across the fleet at this head.
  • bin/audit-fleet-setup --ref ×5: fleet clean (this PR does not touch the vendored docker-dev-origin block).
  • CI/container audit: no mise pins or installs in this repo's workflows/Dockerfiles — nothing breaks at merge.

Precompiled-ruby spike (draft evidence)

Run with the durable harness (test/ruby-precompiled-spike, shipyard PR) from a clean detached worktree at THIS PR's head, against a source-built v2026.7.8 (de81dc85; binding runs re-execute with the published floor release at the final head):

ok: spike-fizzy: worktree clean before
ok: spike-fizzy: credential preflight reaches https://github.com/basecamp/useragent
ok: spike-fizzy: hostile inherited askpass never invoked
ok: spike-fizzy: toolset installed with no compile activity
ok: spike-fizzy: pinned ruby 3.4.8 active
ok: spike-fizzy: ABI dir lib/ruby/3.4.0 present
ok: spike-fizzy: extensions dir is 3.4.0-static (precompiled provenance)
ok: spike-fizzy: bundle install completes frozen
ok: spike-fizzy: native gems (sqlite3 nokogiri) load from the built bundle
ok: spike-fizzy: worktree clean after
ALL 26 SPIKE ASSERTIONS PASSED  (full run: both apps + 6 posture assertions)
record: candidate mise: 2026.7.8 (/private/tmp/claude-501/-Users-jeremy-Worktrees-basecamp-shipyard-mise-bootstrap/a4d9d33d-563b-49af-a7f4-6db1fbe545e2/scratchpad/bin/mise-2026.7.8)
record: candidate mise sha256: e1ea4c26035f6b5bcd38a8040c79102b0f7358cbb066ddfee6f7e8bf0cd87d59
record: shipyard: 232eafee8dbee0196620e5c3cb64aa45c068aadc
record: harness blob: 1cdbb1ef41b049bc7db72c719415b5d930c5a7a9
record: fragment blob: 5912d2a1b44860d1ebfe2ee0a2d6448b8ff3b8d0
record: spike-fizzy head: 2a7c22a35e24b2715f31d5ef6a5fb6aee22ad553
record: spike-fizzy tree: 4fd30ebdbec759b6add546713244b9a3795a8ce8
record: spike-fizzy base: origin/main 595ebf58a4cbdce0ea516df649da557929d58288

Bumps this repo's vendored floor pair — min_version in .mise.toml and
mise_min_version in bin/setup — in lockstep with the fleet-wide raise to
the first mise containing jdx/mise#11034 (transport-agnostic repo-origin
comparison), which the docker-dev-origin v2 setup block relies on.

The literal is provisional on the first PUBLISHED qualifying release:
the v2026.7.8 tag contains the fix, but its release builds have failed
(deterministic macos-arm64 PGO mismatch) — re-literal before merge if a
later release publishes first. Setup upgrades mise in place, so
un-upgraded machines converge on their next bin/setup run; until then a
raised .mise.toml floor errors on every mise invocation in this checkout
(announce before landing).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant