fix(install-mise): bump mise to v2026.7.7

[llwt]

What changed

• bump the public install-mise descriptor and runtime fallback from mise v2025.12.2 to v2026.7.7
• bump the copied fallbacks in install-mise-if-present and install-java-if-present
• update the documented default and usage example

Why

GitHub now serves artifact attestation bundles as Snappy-compressed responses. The sigstore verifier embedded in mise v2025.12.2 attempts to decode those bytes directly as JSON, so Aqua-backed tools with required attestations fail during mise install.

mise added Snappy bundle support in v2026.2.13; v2026.7.7 is the current release and successfully installs zizmor@1.23.1 with artifact attestation verification enabled.

Fixes #131.

Verification

• isolated mise v2026.7.7 install of zizmor@1.23.1: passed with GitHub artifact attestations verified
• node --check on all three changed installer implementations: passed
• parsed workflow-steps/install-mise/main.yaml and asserted the new default: passed
• pnpm run build-all: passed
• git diff --check: passed

Prettier still reports the three installer JavaScript files as baseline-unformatted; formatting entire files was intentionally left out of this version-only fix.

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 40a5d81

Command	Status	Duration	Result
nx affected -t test	✅ Succeeded	<1s	View ↗
nx run-many -t build	✅ Succeeded	1s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-07-17 02:16:09 UTC