- **(aqua)** use GitHub API digests for release asset checksums by @jdx…

… in [#6720](#6720)

- **(github)** use GitHub API digests for release asset checksums by @jdx in [#6721](#6721)
- **(plugins)** automatically install backend plugins by @roele in [#6696](#6696)
- **(tasks)** add choices to flag() and enable naked runs with task flags by @jdx in [#6707](#6707)

- **(config)** show trust error instead of silently skipping untrusted configs by @jdx in [#6715](#6715)
- **(env)** handle non-ASCII environment variables gracefully by @arnodirlam in [#6708](#6708)
- **(nix)** add cmakeMinimal to nativeBuildInputs by @okuuva in [#6691](#6691)
- **(tasks)** load project env vars for global tasks with dir="{{cwd}}" by @jdx in [#6717](#6717)

- update gh to latest (2.82.1) by @jdx in [#6718](#6718)

- @arnodirlam made their first contribution in [#6708](#6708)

- **(tasks)** add env var support for args/flags in usage specs by @jdx…

… in [#6704](#6704)

- **(release)** prevent S3 rate limiting errors during CDN upload by @jdx in [#6705](#6705)

- add comprehensive documentation for environment plugins by @jdx in [#6702](#6702)

- bump mlua from 0.11.0-beta.3 to 0.11 by @jdx in [#6701](#6701)

- **(revert)** fix(deps): update rust crate ubi to 0.8.2 by @nekrich …

…in [#6700](#6700)

- Add fnox as recommended secret management option by @jdx in [#6698](#6698)

- @nekrich made their first contribution in [#6700](#6700)

- **(rust)** preserve original PATH entries when managing tool paths by 

@jdx in [#6689](#6689)

- update rust crate ubi to 0.8.2 by @risu729 in [#6693](#6693)

- remove experimental labels from stable features by @jdx in [#6684](#…

…6684)

- **(tasks)** resolve :task patterns in run blocks for monorepo tasks by @LER0ever in [#6682](#6682)

- Fix typo in comparison-to-asdf.md by @TobiX in [#6677](#6677)

- update docker/dockerfile:1 docker digest to b6afd42 by @renovate[bot] in [#6675](#6675)
- update fedora:43 docker digest to 2ad3073 by @renovate[bot] in [#6676](#6676)

- @LER0ever made their first contribution in [#6682](#6682)

- **(backend)** sync parent directory after removing incomplete marke…

…r by @EronWright in [#6668](#6668)

- **(tasks)** improve error message for untrusted config files by @jdx in [#6672](#6672)
- fix(deps) Revert "fix(deps): update rust crate ubi to 0.8 " by @swgillespie in [#6652](#6652)

- @swgillespie made their first contribution in [#6652](#6652)
- @EronWright made their first contribution in [#6668](#6668)

- **(docs)** add missing config file path by @azais-corentin in [#6658](

#6658)

- **(task)** resolve monorepo dependency chains with local task references by @jdx in [#6665](#6665)
- **(ui)** add terminal detection for OSC 9;4 progress sequences by @jdx in [#6657](#6657)

- fix aqua package info in CHANGELOG.md by @jdx in [#6664](#6664)

- @azais-corentin made their first contribution in [#6658](#6658)

- add codex (`npm:@openai/codex`) by @risu729 in [#6634](#6634)

- add tests (1password-certstrap) by @risu729 in [#6592](#6592)

- **(plugins)** more archiver extensions by @blaubaer in [#6644](#6644)

- **(cli)** make `mise //foo` equivalent to `mise run //foo` by @neongreen in [#6641](#6641)
- **(config)** load MISE_ENV configs for monorepo tasks by @jdx in [#6624](#6624)
- improve ... pattern matching for monorepo tasks by @neongreen in [#6635](#6635)

- **(security)** use HTTPS instead of HTTP for version hosts by @jdx in [#6638](#6638)

- update rust crate ubi to 0.8 by @risu729 in [#6637](#6637)

- @neongreen made their first contribution in [#6641](#6641)

- add lazyssh by @TyceHerrman in [#6610](#6610)

- **(config)** Add a ceiling to how mise searchs for config & tasks by @richardthe3rd in [#6041](#6041)
- **(release)** include aqua-registry updates in changelog and release notes by @jdx in [#6623](#6623)

- **(task)** use config_root instead of project_root for task base path by @risu729 in [#6609](#6609)
- **(task)** resolve project tasks in run blocks using TaskLoadContext by @jdx in [#6614](#6614)
- **(task)** dont truncate task message when CI is set by @roele in [#6620](#6620)
- **(tasks)** restore MISE_ENV environment inheritance for tasks by @glasser in [#6621](#6621)
- **(ui)** prevent OSC 9;4 progress sequences from being written to non-terminals by @jdx in [#6615](#6615)

- remove cosign/slsa-verifier from mise.toml by @jdx in [#6616](#6616)

- @richardthe3rd made their first contribution in [#6041](#6041)

- add vfox-mongod by @blaubaer in [#6586](#6586)

- add OSC 9;4 terminal progress indicators by @jdx in [#6584](#6584)
- make progress bar a footer by @jdx in [#6590](#6590)

- **(task)** preserve ubi tool options during auto-install by @jdx in [#6600](#6600)
- unify project_root and config_root resolution by @risu729 in [#6588](#6588)

- **(exec)** remove redundant tty check for auto-install by @jdx in [#6589](#6589)
- remove duplicated task loads by @risu729 in [#6594](#6594)

- @blaubaer made their first contribution in [#6586](#6586)