chore: release v1.18.1

[mise-en-dev]

🤖 New release: v1.18.1

This PR bumps the workspace to v1.18.1 and regenerates CHANGELOG entries, aube.usage.kdl, the CLI docs, and the benchmark results.

See the diff for the full set of changes, or the per-crate CHANGELOG.md files for the release notes that will ship.

---

Generated by the release-plz-pr workflow.

Summary by CodeRabbit

• New Features

  • Added support for global updates.

• Bug Fixes

  • Fixed regeneration of conflicted lockfiles.
  • Improved lockfile tarball URL verification during installation.

• Chores

  • Bumped version to 1.18.1.
  • Updated benchmarks.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 88ebbd98-05ec-4473-8001-5d168ab6109c

📥 Commits

Reviewing files that changed from the base of the PR and between 528203f and 0e54deb.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (17)

• Cargo.toml
• aube.usage.kdl
• crates/aube-codes/CHANGELOG.md
• crates/aube-linker/CHANGELOG.md
• crates/aube-lockfile/CHANGELOG.md
• crates/aube-manifest/CHANGELOG.md
• crates/aube-registry/CHANGELOG.md
• crates/aube-resolver/CHANGELOG.md
• crates/aube-scripts/CHANGELOG.md
• crates/aube-settings/CHANGELOG.md
• crates/aube-store/CHANGELOG.md
• crates/aube-util/CHANGELOG.md
• crates/aube-workspace/CHANGELOG.md
• crates/aube/CHANGELOG.md
• docs/cli/commands.json
• docs/cli/index.md
• release.json

✅ Files skipped from review due to trivial changes (8)

• docs/cli/index.md
• crates/aube-registry/CHANGELOG.md
• aube.usage.kdl
• crates/aube-settings/CHANGELOG.md
• crates/aube-manifest/CHANGELOG.md
• crates/aube-scripts/CHANGELOG.md
• docs/cli/commands.json
• crates/aube-util/CHANGELOG.md

🚧 Files skipped from review as they are similar to previous changes (6)

• crates/aube-workspace/CHANGELOG.md
• crates/aube-store/CHANGELOG.md
• crates/aube-lockfile/CHANGELOG.md
• crates/aube/CHANGELOG.md
• crates/aube-resolver/CHANGELOG.md
• Cargo.toml

---

📝 Walkthrough

Walkthrough

This PR bumps the workspace and internal crate versions from 1.18.0 to 1.18.1, adds 1.18.1 entries to all crate changelogs, and synchronizes CLI usage/spec, generated CLI docs, and release metadata (timestamp).

Changes

Version 1.18.1 Release Bump

Layer / File(s)	Summary
Build Manifest Versioning Cargo.toml	Workspace package version and all twelve internal workspace crate dependencies (aube, aube-codes, aube-settings, aube-resolver, aube-registry, aube-store, aube-linker, aube-lockfile, aube-manifest, aube-scripts, aube-workspace, aube-util) updated from 1.18.0 to 1.18.1.
Per-crate CHANGELOG updates crates/*/CHANGELOG.md	Added or updated ## [1.18.1] entries under Unreleased across workspace crates (dated 2026-06-07), each noting refreshed benchmarks for v1.18.0 (PR #841); crates/aube also includes Fixed and Security bullets referencing PRs.
CLI spec, generated docs, and release metadata aube.usage.kdl, docs/cli/commands.json, docs/cli/index.md, release.json	Bumped top-level CLI/version fields and release.json version/timestamp to 1.18.1; generated CLI commands docs and index version string updated to match.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• endevco/aube#821: Earlier release bump updating the same set of versioned fields and artifacts.
• endevco/aube#817: Another coordinated release bump touching workspace manifest, CLI spec, generated docs, and release metadata.
• chore: refresh benchmarks for v1.18.0 #841: Benchmarks refresh referenced in multiple changelog entries included in this PR.

Poem

🐰 I hop through files with a cheerful cheer,
Bumped .0 to .1 — the release is here!
Cargo, docs, changelogs all sing along,
Tiny edits tidy, steady, and strong.
🥕

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: release v1.18.1' directly and accurately describes the primary change—a version bump release from 1.18.0 to 1.18.1 across the workspace and all dependent crates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-plz-2026-06-04T17-51-52Z

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[greptile-apps]

Greptile Summary

This is an automated release-plz PR that bumps the entire workspace from v1.18.0 to v1.18.1 and regenerates all derived artifacts.

• Version updated consistently across Cargo.toml, Cargo.lock, aube.usage.kdl, release.json, and the CLI docs — all 12 workspace crates are in sync at 1.18.1.
• CHANGELOG entries added for each crate, covering a lockfile conflict fix (fix(install): regenerate conflicted lockfiles #843), global update support (fix(update): support global updates #840), a security fix for tarball URL verification (security(install): verify lockfile tarball URLs #842), and a benchmark refresh (chore: refresh benchmarks for v1.18.0 #841).
• No source code logic changes are included in this PR; it is purely a version-bump and changelog generation commit.

Confidence Score: 5/5

Purely mechanical version bumps and generated changelog/doc updates with no source logic changes — safe to merge.

Every changed file is either a version string update or a changelog/doc regeneration produced by the release-plz workflow. All 12 crate versions are consistent, no third-party dependencies were modified, and the release timestamp matches the PR date.

No files require special attention.

Important Files Changed

Filename	Overview
Cargo.toml	Workspace version bumped from 1.18.0 to 1.18.1; all 12 internal crate version references updated consistently
Cargo.lock	All 12 workspace crates have their locked versions bumped from 1.18.0 to 1.18.1; no third-party dependency changes
release.json	Version and releasedAt timestamp updated to 1.18.1 / 2026-06-07
crates/aube/CHANGELOG.md	New 1.18.1 section added covering two bug fixes (#840, #843), a security fix (#842), and benchmark refresh (#841)
crates/aube-codes/CHANGELOG.md	New 1.18.1 section added with lockfile fix (#843), security fix (#842), and benchmark refresh (#841)
docs/cli/commands.json	Top-level version field updated from 1.18.0 to 1.18.1
docs/cli/index.md	Version string in CLI reference docs updated to 1.18.1
aube.usage.kdl	Version field updated to 1.18.1

_{Reviews (5): Last reviewed commit: "chore: release v1.18.1" | Re-trigger Greptile}

[github-actions]

Benchmark changes

Versions:

• aube: 1.18.0 -> 1.18.1

Public ratios: warm installs vs Bun 7x -> 3x; warm installs vs pnpm 9x -> 5x.

Benchmark	aube	bun	pnpm
Fresh install (warm cache)	272ms -> 585ms (+115%)	2003ms -> 1590ms (-21%)	2341ms -> 2851ms (+22%)
Fresh install (cold cache)	7950ms -> 6236ms (-22%)	5777ms -> 5726ms (-1%)	15870ms -> 16874ms (+6%)

0e54deb vs cee3f38 | aube/bun/pnpm | 3 scenarios | 3 runs | 500mbit/50ms | generated by Codex.