chore(main): release 0.2.0

[snowdream]

🤖 I have created a release beep boop

0.2.0 (2026-05-28)

Features

• add container backend and provider (cda8e1c)
• add support for global proxy settings in config file (b478b5f)
• add UNIRTM_ACTIVE env var to track shell activation status (b5eb733)
• backend: add gitlab slsa provenance verification and fix backend tests (20cac21)
• backend: implement dependency declaration for tool backends (8a38a06)
• backend: implement smart HTTP/2 downgrade for provenance verification (a1797bf)
• bootstrap: implement unirtm self-bootstrapping and fix exec arg parsing (b10c49c)
• ci: integrate npm publishing into GoReleaser workflow (f6218f5)
• cli: add -i/--interactive upgrade checklist to outdated command (890498a)
• cli: add concurrent reshim with dead-shim cleanup and freed disk space reporting in prune (3114fac)
• cli: add progressive loading spinner to search command (4fae96d)
• cli: align alias command with mise and add hierarchical UI (a5a8043)
• cli: align cache command with mise and add stats panel UI (618396a)
• cli: align cache command with mise and upgrade UI with pterm (132727e)
• cli: align config command with mise and enhance UI with mirror grouping (bdeb8be)
• cli: align current command with mise and enhance UI (6674647)
• cli: align doctor command with mise and upgrade to dashboard UI (171ba4b)
• cli: align where command with mise (ba089e9)
• cli: allow 'unirtm run' to list tasks when invoked without arguments (af260e4)
• cli: display active configuration files in 'config show' (3196eb1)
• cli: enhance activate, deactivate, and bin-paths for full mise parity (8cdc5ba)
• cli: enhance alias command with hierarchical view, smart resolution, and mise parity (cd6c5b2)
• cli: enhance doctor network diagnostics with proxy detection and better error hints (0882417)
• cli: enhance generate command with gitlab-ci and dockerfile templates (a280d0d)
• cli: enhance link command with path validation and automatic shim generation (d647835)
• cli: enhance list command with disk size column and --current filter (d140ea7)
• cli: enhance ls-remote with --limit flag and installed version checkmarks (bb20f52)
• cli: enhance registry, search UI and migrate with visual side-by-side diffs (fb3d6e9)
• cli: enhance tool and tool-stub commands to parity with mise (7a9c6cb)
• cli: enhance where command with smart binary-to-tool resolution (8ab6316)
• cli: implement and refine test-tool command to execute and verify installed tools (f489a90)
• cli: implement cross-platform tool autodetection and symlinking for sync command (3441195)
• cli: implement parallel automatic dependency preparation check and installation (771495f)
• cli: list all effective config sources for tool command (2106b72)
• cli: overhaul fmt command with premium UI and recursive processing (03e0e4a)
• cli: upgrade completion command with pterm spinners and improved feedback (c36af16)
• cli: upgrade implode command with premium visuals and deep cleanup (32691db)
• cmd: add helpful tip when using system default editor in edit command (32db92b)
• cmd: add trust status column to trust list output (dff46e9)
• cmd: dynamically detect executable path for doctor fix suggestions (8297ba9)
• cmd: enable auto-installation of tools in exec command (45845ea)
• cmd: enhance 'env' command with interactive dashboard and rich visualization (7abf183)
• cmd: make trust auto-target local config and add --list flag (13fb293)
• cmd: overhaul 'exec' command with tool@version syntax, zero-overhead process replacement, and unified branding (8406131)
• cmd: populate InjectedPaths in activate command for Env mode (3141aa0)
• cmd: refactor self-update with install source detection, safe download, and post-upgrade verification (f523063)
• cmd: show trusted files table after trusting a config file (6640aac)
• cmd: ultimate upgrade for doctor command with settings audit and smart fix suggestions (4464f98)
• cmd: ultimate upgrade for edit command with interactive selection and toml validation (35b0cfb)
• cmd: unify editor discovery with source traceability for edit and doctor commands (b09edd7)
• complete Phase 4 lifecycle and task runner enhancements (c1399c8)
• complete triple-prefix environment variable support and settings mapping (abb4027)
• config: implement global environment variable synchronization and exhaustive prefix support串 (81c9695)
• config: implement hierarchical configuration loading and merging (c470bfe)
• config: migrate to pongo2 and implement Jinja2 syntax bridging串,Cwd: (cc009a1)
• config: support UNIRTM_ and MISE_ prefixes for all environment variables (4be7f1b)
• config: update Merge logic to support HttpProxy and HttpsProxy settings (22fce41)
• core: achieve full parity with mise in tool extraction and binary resolution (d6f8674)
• dependabot: enrich directory ignore list with more ecosystems (62edae9)
• dependabot: migrate directory scan to git ls-files for accurate ecosystem detection (a847214)
• doctor: enhance network connectivity diagnostics with proxy routing visibility (7eea0cf)
• download: implement multi-threaded turbo download engine (e09a41f)
• download: implement smart HTTP/2 to HTTP/1.1 protocol fallback (c9ff2ce)
• download: implement smart proxy bypass for domestic mirror domains (0ef3868)
• download: implement smart thread scheduling based on file size (29cbbcc)
• env: align native tool storage with mise by removing native- prefix (6b60307)
• env: align unset and set with path and env config support (e89442b)
• env: standardize tool installation directory structure to match mise scheme B (2309438)
• exec: align with mise exec and exceed its core capabilities (6bd495e)
• generate: add dependabot generator in go natively (c64d6d8)
• go: support GOSUMDB, GONOSUMDB and GOPRIVATE variables in go backend and provider (c31afc9)
• implement triple-prefix environment variable overrides for all settings (176e388)
• index: implement local tool index seeding, update logic, and status/clear commands (6098906)
• initial release for version 0.1.0 (b25a79d)
• install: add cross-platform installation scripts for Linux/macOS/Windows (6b03e8b)
• install: add dynamic concurrent multi-spinner UX dashboard for parallel downloads (b2fb021)
• install: add throttled download progress logging for large-batch/non-multi installations (aeb35c7)
• installation: add escape hatch to skip provenance verification via env (ff611b9)
• install: implement high-performance concurrent parallel installation and smart config fallback (7ddec1a)
• install: show latest versions first in interactive version selection menu (fe3bc48)
• install: sort version select list programmatically descending with semver and alphabetical fallback (b8f9917)
• install: support multi-tool installation and force flag with premium visual plan dashboard (b55e9c7)
• license: add --skip flag and -s shorthand for --spdx (93515c1)
• license: integrate addlicense as built-in unirtm command (361d709)
• npm: add npm platform packaging structure for multi-platform distribution (ee8615f)
• provenance: implement resilient offline verification for GitHub attestations (1e0e0b0)
• provenance: implement robust, proxy-aware SLSA verification with custom TUF fetcher串,Cwd: (e42915d)
• provenance: support dynamic transparency log verification and global release builders (eab3b4b)
• provider: add gems.ruby-china.com to no_proxy list (4fc8aa9)
• provider: add maven.aliyun.com and cleanup obsolete mirrors in no_proxy (29e18fa)
• provider: add more university mirrors to no_proxy list (4662e83)
• provider: add sn0wdr1am.com to no_proxy list (8d9eaaf)
• provider: add standard User-Agent and Accept headers for API calls串,Cwd: (c08b79d)
• provider: align storage directory structure with mise (5555ad1)
• provider: enhance native providers with mirror and proxy support串,Cwd: (4eae30d)
• provider: expand default no_proxy list with common mirror subdomains (1e009a3)
• provider: implement exponential backoff retry for GitHub API串,Cwd: (cc6bb7c)
• provider: implement intelligent proxy bypass with config and dynamic mirror detection (6e803b3)
• provider: implement quiet progress mode for all tool providers (0c2737f)
• provider: implement zero-dependency archive extraction with smart format sniffing (eebcea9)
• provider: remove deprecated taobao mirrors from no_proxy list (75bf9c3)
• provider: restore taobao mirrors for legacy support (eddff10)
• provider: standardize proxy handling and fix pipx installation failures (53f8a74)
• provider: support .zst/.xz extraction and improve which smart matching (28f6732)
• provider: switch to root domains in no_proxy to cover all mirror subdomains (fixes cdn.npmmirror.com error) (a37a361)
• security: implement minimum_release_age supply chain protection (d267a07)
• security: set minimum_release_age default to 7d (c0cdcf5)
• service: centralize tool specification parsing and backend detection (93d61a1)
• service: implement dependency-aware installation and automatic path migration (c0f2357)
• service: implement idempotent and cross-platform PATH activation logic (e98fe6a)
• service: support skipping checksum and restore env logic串,Cwd: (52929bd)
• shim: add internal tool dispatcher to unirtm binary (Stage 1) (1bfeab2)
• shim: refactor Unix shim generation to use symlinks (Stage 2) (6b8374c)
• shim: simplify backend loop by removing redundant native prefix check (5e959b6)
• support UNIRTM_ prefix for proxy environment variables (cc7507b)
• task: add flexible output controls (flag, env, CI-detect) and show spinner output on success/failure (3808c63)
• tasks: add --fix flag to unirtm run (7544bec)
• task: support cross-platform Windows shell delegation in native runner (2145981)
• trust: enhance trust/untrust commands with detailed listings and sha-256 validation (39db719)
• ui: implement Style C (unified concise feedback) for installation workflow串,Cwd: (135c576)
• uninstall: support multi-tool package specs uninstallation with clean and professional terminal logs (6fac68a)
• uninstall: support optional version and @-syntax with database resolution (a53bd4d)
• unuse: add global, path, and env flags to unuse command (9f54234)
• update: enhance update command with interactive loaders and high fidelity visual feedback (0ed1fcc)
• use: add --pin support for concrete version resolution (05753d5)
• use: align use command flags and features with mise, adding --force and --env support with comprehensive tests (814a6d0)
• use: automatically download and install tool version if missing during use (84512f3)
• watch: enhance watch command with process tree hot-reloading and UI (ae7142f)

Bug Fixes

• backend: add go-pkg backend for go package installation and include pip-audit/govulncheck (3023fa7)
• backend: disable HTTP/2 globally during provenance verification if HTTP2=0 (6aa8182)
• backend: isolate http transport to prevent global DefaultTransport side-effects (9d724f9)
• backend: properly propagate checksum fetching errors (093b2bc)
• ci: add sparse checkout bootstrap before local harden-runner actions (4fe39a9)
• ci: explicitly specify npm official registry for all publish commands (c99f2ac)
• ci: inline step-security/harden-runner in all 14 workflows (450d136)
• ci: move npm build step from goreleaser after_hooks to GitHub Actions (ffcb2a9)
• ci: remove emoji from sh run blocks to prevent UTF-8 parsing errors (56a0e23)
• ci: remove harden-runner composite action wrappers (9ae20a3)
• ci: use dist/metadata.json version instead of raw git tag (b851ff5)
• ci: use node instead of jq to parse dist/metadata.json (b889491)
• ci: use single quotes for echo to prevent history expansion in zsh (cbc9e55)
• cli: correctly detect active versions for tool command by matching config request with installed versions instead of parsing symlink (dde4db5)
• cli: do not suggest alternatives if command fails with non-zero exit code (ae936d6)
• cli: ensure implode command deletes entire data directory (0e57510)
• cli: handle 'v' prefix tolerance in current command version detection (05900ec)
• cli: implement robust case-insensitive 'v/V' prefix handling for version detection (538ed5a)
• cli: implement robust normalized matching for date-based (CalVer) versions (23096c4)
• cli: truncate long environment variables in doctor command to preserve layout (9d9d4b6)
• cmd: dynamically resolve config file name in tasks message (8927d3f)
• cmd: fix tool installation path detection by normalizing tool names into slugs (dd04623)
• cmd: fix tool version normalization in doctor command to handle 'v' prefixes (7117f12)
• cmd: prioritize exact matches in which command and restrict tool fallback (8937275)
• cmd: remove unused term import in exec command (ba2f6aa)
• cmd: restore missing cache calculation logic in cache command (880c1a5)
• cmd: strengthen detectInstallMethod with nix/snap/asdf/macports/pkgx support and safer Go path detection (94c8af7)
• cmd: warn user when tasks are ignored due to modified config (9c442b1)
• common.sh: make versions.sh and bootstrap.sh sources optional (41a78fc)
• config: filter out non-existent files from trusted list (1918b00)
• config: implement DurationOrInt custom unmarshaling and resolve tests (6b8496d)
• core: remove duplicate icons and newlines in CLI output (705eba1)
• database: resolve SQLITE_BUSY errors during highly concurrent installations (8a22331)
• dependabot: expand WalkDir skip list to prevent spurious ecosystem entries (8509137)
• dependabot: skip .devcontainer dir in WalkDir to prevent spurious docker entry (4b627ac)
• download: enforce strict HTTP/1.1 ALPN negotiation to bypass CDN HTTP/2 bugs (4019b5c)
• download: enhance industrial-grade robustness for extreme network conditions (e093dbe)
• download: fix defer in loop causing persistent protocol mismatch (2b8d2b7)
• download: fix progress freeze and timeout for large files (1767768)
• download: fortify concurrent download engine with industrial-grade safeguards (f36b23a)
• download: implement Equal Jitter exponential backoff for concurrent threads (a8c141b)
• download: implement robust physical protocol isolation for fallback (727689b)
• download: prevent connection pool pointer leak during concurrent installations (260e12c)
• download: prevent redundant fallback on context cancellation (a91d378)
• download: strictly enforce chunk boundaries and fix premature EOF bug (6d3fe10)
• env: align macOS cache path with mise (standard XDG/macOS) (0f55d4c)
• env: bypass prefix lookup for PATH in env.Get to prevent task execution failures (28470f9)
• env: inject provider specific environment variables into active shell (1aa8172)
• exec: correctly parse tool spec to resolve env vars (3cd87ba)
• exec: reject archive/non-executable files in ResolveExecutable (61e036d)
• fmt: eliminate DATA RACE in TestFmtCmd_* under go test -race (4c77d80)
• http: add ALL_PROXY fallback support with proper NO_PROXY enforcement (0ae743c)
• http: honor NO_PROXY in custom proxy resolver via httpproxy.Config (537ff93)
• install: cap concurrent multispinner UI to avoid terminal scrolling glitches (f9fa73a)
• install: implement custom thread-safe spinner manager to eliminate progress duplicates (bd3619a)
• install: prevent progress bar race condition in concurrent downloads (d039334)
• install: suppress extraction flattening and hook execution logs during concurrent installation (e2b4944)
• install: suppress individual interactive progress UI during concurrent installation (ade6f0b)
• install: treat already installed status as success in concurrent manager to avoid skipping dependents (561afd0)
• install: use full tool key for lockfile validation (46e7f6f)
• license: resolve flag shorthand conflicts with root persistent flags (4c77d80)
• license: use -H as shorthand for --holder flag (92c0b59)
• license: use -Y as shorthand for --year flag (8ec0916)
• lint: resolve pre-commit missing executable errors and checkmake issues (ef2818a)
• lint: resolve pre-commit shellcheck and markdownlint issues (e403b43)
• lint: resolve yamllint setup version and fix shellcheck recursion issues (2fed416)
• local-verification: remove || true from security audit tasks so vulnerabilities fail the build locally (a755027)
• local-verification: remove remaining || true to enforce strict audit failure (c4ca553)
• lockfile: CheckStrict should not require URL for package manager backends (da3c05a)
• node: resolve 404 download error and enhance template compatibility (6cbce86)
• npm: correct repository.url format to git+https in all package.json.tpl files (825c08c)
• npm: export and concatenate NODE_PATH for npm plugins (eb44f9a)
• npm: remove bin field from platform-specific sub-packages to resolve global install collision (2065068)
• prevent silent installation of corrupted archives (50ac2cd)
• provenance: remove broken GITHUB_PROXY hijacking of standard proxy env vars (c0fc36b)
• provider/generic: relativize symlinks and prevent overwriting binaries (8584b96)
• provider: auto-rename primary executable to standard tool name (440c100)
• provider: fix tool name resolution and cleanup duplicate code (cf00c61)
• provider: implement virtualenv path rewriting in pypi PostInstall to resolve relocatability issues (eb2bfe9)
• provider: prefer UniRTM-managed conda installations for conda packages (055ddd4)
• provider: prefer UniRTM-managed dotnet installations for dotnet tools (e3c07cd)
• provider: prefer UniRTM-managed go installations for go packages (7b74b04)
• provider: prefer UniRTM-managed node/npm installations for npm tools (3a054d0)
• provider: prefer UniRTM-managed python installations for PyPI tools (5c7f163)
• provider: prefer UniRTM-managed ruby/gem installations for ruby gems (b946e75)
• provider: prefer UniRTM-managed rust/cargo installations for cargo crates (2cd79a8)
• provider: prefer UniRTM-managed swift installations for SPM packages (fdc79cf)
• provider: remove official rust domain from no_proxy defaults (984efaf)
• provider: remove unused env import after refactoring (5ed3c61)
• provider: replace hardcoded extension list with heuristic (74e7070)
• python: resolve 504 error and version mapping issues (94e6851)
• resolve activation PATH issues and improve which command (9e7fb50)
• resolve checkmake duplicate log issue by improving version normalization in installation manager (9b5503f)
• resolve deadlocks and timeouts in backend operations (091a737)
• resolve editorconfig-checker false positives for Go and testdata (7f7797d)
• resolve trivy gomod vulnerabilities and add trivy to unirtm tools (2d0d4d0)
• service: clean up all sub-commands and helper binary shims during uninstallation (00e84ef)
• service: clean up empty parent directories and dead shim files during uninstallation (1c3835a)
• service: ignore hidden and OS system files like .DS_Store during parent directory cleanup (c4b010b)
• service: implement progress update throttling to prevent terminal freezing (0cac080)
• service: refine shell config injection/removal patterns and enhance PowerShell compatibility (1d27ca4)
• service: resolve 'already exists' error during re-installation by implementing Upsert (d333422)
• service: unify installation detection with robust version variant support (v/V prefix) (fe5734b)
• service: use individual sed commands to ensure cross-platform compatibility and avoid regex grouping errors (eb4e9c6)
• task: capture and display stdout/stderr on task failure (2c34875)
• tasks: remove os.Expand from native runner (92a89a5)
• ui: ensure final progress bar frame renders completely before stopping (c965f4e)
• ui: guarantee deterministic rendering of final 100% progress frame (7ea8778)
• ui: prevent progress bar from freezing at 100% when download resets (90d5994)
• uninstall: resolve CLI error double printing by returning clean formatted errors to central cmd wrapper (3e6cfd0)
• update: allow --preview to run without specifying a tool or --all (011af7a)
• which: auto-delete stale DB records when install path missing on disk (8d347a9)
• which: resolve tools by executable name when tool-name lookup fails (6aabb72)
• windows npm provider and node shims paths (1eab3a8)

Performance Improvements

• download: increase network timeouts for better proxy compatibility (e792bdc)
• http: resolve proxy config once at transport init, not per request (bdc3839)
• service: optimize installation flow with local-first check and enhance GitHub API resilience串,Cwd: (9ddfcef)

---

This PR was generated with Release Please. See documentation.