.mise.toml

# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

# Tool versions managed by mise (https://mise.jdx.dev/).
# Run `mise install` to install all tools, or `mise use <tool>` to add a new one.
#
# Tools NOT managed here:
#   - buildctl: only needed for container builds. Install manually or via `brew install buildkit`.

# Single source of truth for the pinned mise version. `tools/install-mise.sh`
# reads `min_version` from this file; an older mise on PATH fails fast here too.
min_version = '2026.7.5'

[tools]
# Tools for working with JSON, Git, and other system utilities.
jq = "1.8.1"
yq = "4.44.1"
github-cli = "latest"
"aqua:google/osv-scanner" = "latest"
ripgrep = "latest"

# Tools for managing Python environments and packages.
dprint = "latest"
uv = "0.9.30"
ruff = "0.15.0"
ty = "0.0.44"

"aqua:j178/prek" = "latest"

[env]
# Activate the project virtualenv (equivalent to the old .envrc "layout python3").
VIRTUAL_ENV = "{{ env.UV_PROJECT_ENVIRONMENT | default(value=config_root ~ '/.venv') }}"
_.path = ["{{ env.UV_PROJECT_ENVIRONMENT | default(value=config_root ~ '/.venv') }}/bin"]
_.file = [".env", { path = ".env.local", redact = true }]

[task_config]
includes = [
    ".mise/tasks",
    ".mise/tasks/*.toml",
]

[settings]
lockfile = true
install_before = "7d" # only resolve to versions released more than 7 days ago - can help mitigate supply chain attacks
lockfile_platforms = ["macos-arm64", "linux-x64", "linux-arm64"]
idiomatic_version_file_enable_tools = []