chore: release v1.22.0

[jdx]

🤖 New release: v1.22.0

This PR bumps the workspace to v1.22.0 and regenerates CHANGELOG entries, aube.usage.kdl, the CLI docs, and the benchmark results.

See the diff for the full set of changes, or the per-crate CHANGELOG.md files for the release notes that will ship.

---

Generated by the release-plz-pr workflow.

---

Note

Low Risk
Diff is release-plz metadata and changelog/docs only; functional risk lives in the already-merged PRs listed in the changelogs, not in this bump itself.

Overview
Release v1.22.0 — mechanical version sync across [workspace.package], internal crate path deps in Cargo.toml, Cargo.lock, aube.usage.kdl, docs/cli/*, and release.json (released 2026-06-17).

Per-crate and root CHANGELOG sections for 1.22.0 record what ships with this tag (already merged on main): scope-specific registry auth tokens; install/lockfile fixes (pnpm-lock parity, sharedWorkspaceLockfile=false member installs, nested pnpm-workspace.yaml boundaries, tarball URL verification against packuments, unsafe dependency alias rejection, time-based resolution time: field behavior); embedder profile honored in install banner and cache/name paths; commands returning exit codes instead of process::exit for lib embedding; plus benchmark refresh notes.

No application Rust source changes appear in this diff — review is mainly version consistency and release notes accuracy.

^{Reviewed by Cursor Bugbot for commit caa37ad. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

Version bump from 1.21.0 to 1.21.1: workspace package and all internal crate dependency versions in Cargo.toml, CLI usage definition, generated CLI docs, and release.json metadata are updated. Changelog entries are added across 13 crates documenting fixes for member installs when sharedWorkspaceLockfile=false, lockfile formatting/field parity, and benchmark refresh entries.

Changes

Release 1.21.1 version bump

Layer / File(s)	Summary
Cargo workspace version update Cargo.toml	[workspace.package] version and all 13 internal crate entries in [workspace.dependencies] are updated from 1.21.0 to 1.21.1.
Release metadata and CLI documentation release.json, aube.usage.kdl, docs/cli/commands.json, docs/cli/index.md	release.json sets version to 1.21.1 and releasedAt to 2026-06-14T20:43:51Z; CLI usage definition and documentation files are synchronized to version 1.21.1.
Core crate changelog entries crates/aube-lockfile/CHANGELOG.md, crates/aube-manifest/CHANGELOG.md, crates/aube-resolver/CHANGELOG.md, crates/aube-store/CHANGELOG.md, crates/aube/CHANGELOG.md	Five core crate changelogs gain 1.21.1 release sections with Fixed entries for member install repairs when sharedWorkspaceLockfile=false, lockfile formatting/field parity closure, and lockfile write-time behavior adjustments.
Supporting crate changelog entries crates/aube-codes/CHANGELOG.md, crates/aube-linker/CHANGELOG.md, crates/aube-registry/CHANGELOG.md, crates/aube-runtime/CHANGELOG.md, crates/aube-scripts/CHANGELOG.md, crates/aube-settings/CHANGELOG.md, crates/aube-util/CHANGELOG.md, crates/aube-workspace/CHANGELOG.md	Eight additional crate changelogs receive 1.21.1 release sections with Other entries noting refreshed benchmarks for v1.21.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• jdx/aube#886: Performs the same coordinated release/version synchronization changes across Cargo.toml, aube.usage.kdl, docs/cli/*, release.json, and per-crate CHANGELOG.md entries.
• jdx/aube#849: Identical structural version bump affecting [workspace.package], [workspace.dependencies], CLI/docs metadata, and all per-crate changelog entries.
• jdx/aube#847: Related release workflow that updates the same version metadata surfaces across the workspace package, internal crate dependencies, CLI definitions, and changelog entries.

Poem

🐇 A tiny hop from one to one-point-one,
The version ticks, the changelog done.
Member installs now all are healed,
Thirteen changelogs have been revealed.
A patch release lands, small but bright—
The rabbit stamps it: ship tonight! 🎉

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Title check	⚠️ Warning	The PR title claims a release to v1.22.0, but the actual changes update the version to v1.21.1, creating a significant mismatch.	Update the PR title to accurately reflect the version bump: change 'chore: release v1.22.0' to 'chore: release v1.21.1'.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[greptile-apps]

Greptile Summary

Automated release PR generated by release-plz, bumping all 13 workspace crates from v1.21.0 to v1.22.0 with corresponding CHANGELOG entries, regenerated CLI docs, and updated release.json.

• All workspace crate versions (Cargo.toml, Cargo.lock) are consistently updated to 1.22.0 with no third-party dependency changes.
• Key changes shipping in this release: scope-specific auth token support (#899), tarball URL verification against packuments (#905), rejection of unsafe dependency aliases (#898), and several pnpm-lock.yaml parity/workspace fixes.

Confidence Score: 5/5

Safe to merge — all changes are automated metadata updates (version bumps, changelogs, CLI docs) with no logic modifications.

Every changed file is a version string update, generated CHANGELOG entry, or regenerated doc artifact. Version numbers are consistently 1.22.0 across all 13 workspace crates in Cargo.toml, Cargo.lock, aube.usage.kdl, docs/cli/commands.json, docs/cli/index.md, and release.json. No source code was modified.

No files require special attention.

Important Files Changed

Filename	Overview
Cargo.toml	Workspace version bumped from 1.21.0 to 1.22.0 in [workspace.package] and all 13 internal crate dependency entries — consistent and correct.
Cargo.lock	All 13 workspace crate entries updated from 1.21.0 to 1.22.0, no third-party dependency changes.
crates/aube/CHANGELOG.md	1.22.0 entry added with 1 new feature (scope-specific auth tokens), 6 fixes, and 2 other items; generated by release-plz from PRs that touched the aube crate directly.
crates/aube-lockfile/CHANGELOG.md	1.22.0 entry includes 5 fixes; notably includes the 'reject unsafe dependency aliases' security fix (#898) that only appears in this sub-crate changelog.
crates/aube-registry/CHANGELOG.md	1.22.0 entry adds scope-specific auth token support and tarball URL verification against packuments — both also reflected in the top-level aube changelog.
release.json	Version updated to 1.22.0 and releasedAt timestamp updated to 2026-06-17T02:28:17Z.
aube.usage.kdl	Single version string bumped from 1.21.0 to 1.22.0.
docs/cli/commands.json	Single version field updated to 1.22.0.
docs/cli/index.md	Version string updated to 1.22.0 in the CLI reference header.

_{Reviews (13): Last reviewed commit: "chore: release v1.22.0" | Re-trigger Greptile}

[github-actions]

Benchmark changes

Versions:

• aube: 1.21.0 -> 1.22.0
• pnpm: 11.6.0 -> 11.7.0

Public ratios: warm installs vs Bun 2x -> 3x; warm installs vs pnpm 3x -> 7x.

Benchmark	aube	bun	pnpm
Fresh install (warm cache)	886ms -> 444ms (-50%)	1813ms -> 1440ms (-21%)	2512ms -> 2934ms (+17%)
Fresh install (cold cache)	5860ms -> 6509ms (+11%)	4856ms -> 5354ms (+10%)	12925ms -> 10995ms (-15%)

caa37ad vs 016f245 | aube/bun/pnpm | 3 scenarios | 3 runs | 500mbit/50ms | generated by Codex.