ci: Bump Base Space

[weebo-update-cli]

Upgrade BaseSpace

Bump mise version

change detected: * key "$.base_tools.mise" updated from "v2026.5.18" to "v2026.6.0", in file "versions.yaml"

v2026.6.0

A focused release that wires npm into Corepack when requested, brings aqua's Windows extension handling in line with upstream, and fixes task include ordering plus a Git Bash `cygdrive` regression.

## Added
- **(npm)** Ensure npm itself is managed by Corepack when `node.corepack=true` and `node.npm_shim=false`, so the Corepack-managed npm shim is enabled alongside yarn/pnpm ([#10196](https://github.com/jdx/mise/pull/10196) by @roele).
- **(cli)** New `mise sponsors` subcommand and a sponsor block on the docs site that lists sponsors fetched from `en.dev/sponsors.json` ([#10182](https://github.com/jdx/mise/pull/10182) by @jdx).

## Fixed
- **(aqua)** Mirror aqua's Windows extension semantics end-to-end ([#10167](https://github.com/jdx/mise/pull/10167) by @risu729):
  - `complete_windows_ext` is now tri-state — explicit `true` completes Windows asset/URL/file source names, explicit `false` leaves them alone, and an omitted value completes by default except for `github_content`/`github_archive` packages.
  - Registry `windows_ext` (default `.exe`, `.sh` for `github_content`/`github_archive`) and `append_ext` are honored when rendering assets, URLs, and Windows install links.
  - `.exe` and `.jar` assets are treated as already complete, existing extensions like `.ps1` are preserved when `format` is omitted, and version dots in names like `tool.1.0.0` no longer suppress Windows completion. The registry compilation cache is bumped to version 2 and will be regenerated on next use.
- **(spm)** Include `provider`, `api_url`, `artifactbundle`, and `artifactbundle_asset` in SPM lock identity so toggling between source builds and artifact bundles no longer silently reuses a stale `mise.lock` entry. `provider` is canonicalized to lowercase (default `github` omitted), `api_url` has trailing slashes trimmed, and `filter_bins` stays out of lock identity since it only affects which built executables are exposed ([#10160](https://github.com/jdx/mise/pull/10160) by @risu729).
- **(bun)** Improve musl detection on Linux: when the system libc preference is unset, fall back to runtime detection and treat unknown results as non-musl, fixing glibc-system installs that were incorrectly resolving to bun's musl build ([#10195](https://github.com/jdx/mise/pull/10195) by @roele).
- **(task)** Honor `task_config.includes` order so a local task can override a same-named `git::` include. Previously a regression in #9147 combined with non-git includes being loaded before all `git::` includes meant a `git::` include always clobbered a same-named local task regardless of position. Includes now load in their declared order with first-wins file-task dedup, so the earlier entry in the list takes precedence uniformly across directory, toml-file, and `git::` includes ([#10191](https://github.com/jdx/mise/pull/10191) by @vmaleze).
- **(task)** Honor `MISE_CYGDRIVE_PREFIX` for Git Bash / MSYS2, not only Cygwin. Git Bash users with a custom `/etc/fstab` automount root can now set the prefix to fix the converted PATH; defaults are unchanged (`/c/...` for Git Bash, `/cygdrive/c/...` for Cygwin) ([#10190](https://github.com/jdx/mise/pull/10190) by @JamBalaya56562).
- **(completion)** Rely on usage 3.4.0's [usage#649](https://github.com/jdx/usage/pull/649) for inherited global flags so `-C`/`--cd`, `-j`/`--jobs`, and `-q`/`--quiet` are recognized before a mounted task without the broad promotion workaround. The narrowed promotion now only covers orphan-short flags `-r`/`-S` (whose root globals are long-only), and `min_usage_version` is bumped to `3.4` so older usage CLIs warn to upgrade instead of silently regressing ([#10176](https://github.com/jdx/mise/pull/10176) by @JamBalaya56562).

## Documentation
- Fix the `choice` template function example to use named-argument syntax ([#10197](https://github.com/jdx/mise/pull/10197) by @joekrill).

## New Contributors
* @joekrill made their first contribution in [#10197](https://github.com/jdx/mise/pull/10197)

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.5.18...v2026.6.0

## 💚 Sponsor mise

mise is built by [@jdx](https://github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). Individual and company sponsorships keep mise fast, free, and independent.

v2026.5.18

A focused release that teaches hooks to accept script arrays, ships an `npm install -g mise` package, and tightens lock identity across several backends so `mise.lock` entries can no longer be reused for option combinations that resolve to a different artifact set.

## Added
- **(config)** Hooks now accept `script`/`scripts` arrays for current-shell hooks ([#9836](https://github.com/jdx/mise/pull/9836) by @risu729):

  ```toml
  [hooks.enter]
  shell = "bash"
  script = [
    "source completions.sh",
    "export PROJECT_READY=1",
  ]
  ```

  Note that `run` is still string-only — to spawn multiple inline commands, use a list of `{ run = "..." }` entries or one multiline `run` string.

## Fixed
- **(env)** PATH entries under mise's installs directory are now treated as mise-managed during `hook-env` reactivation, so an inactive install path like `installs/node/24/bin` inherited from a parent shell can no longer sit ahead of the active project's `installs/node/22.17.1/bin` ([#10162](https://github.com/jdx/mise/pull/10162) by @risu729).
- **(config)** `.miserc.toml` discovery now stops at raw `MISE_CEILING_PATHS` entries (without recursing through the lazy fallback), preventing a parent `.miserc.toml` above the ceiling from injecting `MISE_ENV` ([#10165](https://github.com/jdx/mise/pull/10165) by @risu729).
- **(task)** `mise tasks ls --json`, `tasks info --json`, and the MCP tasks resource now serialize full `run` entries — including single task refs and task groups — instead of script-only strings ([#10163](https://github.com/jdx/mise/pull/10163) by @risu729).
- **(task)** Bump `usage-lib` to 3.4.0 and update the zsh completion to read `display<TAB>insert` pairs from `usage complete-word`, restoring task completions after the `usage-cli` 3.4.0 output change ([#10181](https://github.com/jdx/mise/pull/10181) by @jdx).
- **(installer)** Add the missing `warn` helper used by the standalone installer's checksum fallback paths ([#10157](https://github.com/jdx/mise/pull/10157) by @risu729, recreating @olfway's original fix).

### Lock identity

A batch of fixes ensures `mise lock` selects entries by an identity that actually reflects the installed result, so toggling an option no longer silently reuses a stale lock entry:

- **(conda)** Include the conda channel — the same `tool@version` resolved against `conda-forge`, `bioconda`, or a private channel can produce entirely different builds and checksums ([#9984](https://github.com/jdx/mise/pull/9984) by @risu729).
- **(rust)** Include rustup `profile`, `components`, and `targets`, read from both tool options and `rust-toolchain.toml`, with stable sorting ([#9988](https://github.com/jdx/mise/pull/9988) by @risu729).
- **(github)** Include target artifact selectors (`api_url`, `version_prefix`, per-platform `asset_pattern`, direct `url`, `no_app`) for GitHub, GitLab, and Forgejo backends, resolved per target platform ([#9985](https://github.com/jdx/mise/pull/9985) by @risu729).
- **(python)** Include non-default `patch_sysconfig = false` (the interpreter tree differs after install); `virtualenv` stays out as an activation-only overlay ([#10161](https://github.com/jdx/mise/pull/10161) by @risu729).

## Changed
- **(npm)** mise is now published to npm under the unscoped `mise` package, so `npm install -g mise` and `npx mise` work directly. The legacy `@jdxcode/mise` scoped package continues to be published, and the new wrapper reuses the existing `@jdxcode/mise-<os>-<arch>` platform tarballs ([#10183](https://github.com/jdx/mise/pull/10183) by @jdx).

**Full Changelog**: https://github.com/jdx/mise/compare/v2026.5.17...v2026.5.18

## 💚 Sponsor mise

mise is built by [@jdx](https://github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors.

If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). Individual and company sponsorships keep mise fast, free, and independent.

GitHub Action workflow link

---

Created automatically by Updatecli Options: Most of Updatecli configuration is done via its manifest(s). If you close this pull request, Updatecli will automatically reopen it, the next time it runs. If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made. Feel free to report any issues at github.com/updatecli/updatecli. If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!