[jdx]

🤖 New release: v1.35.0

This PR bumps the workspace to v1.35.0 and regenerates CHANGELOG entries, aube.usage.kdl, the CLI docs, and the benchmark results.

See the diff for the full set of changes, or the per-crate CHANGELOG.md files for the release notes that will ship.

---

Generated by the release-plz-pr workflow.

---

Note

Low Risk
Mechanical version and changelog/doc updates only; no application logic changes in this diff.

Overview
Release automation PR that bumps the workspace from 1.34.0 to 1.35.0 and syncs every version pin in Cargo.toml, Cargo.lock, internal crate path deps, aube.usage.kdl, docs/cli/*, and release.json (releasedAt updated).

Per-crate and root CHANGELOG sections for 1.35.0 document what ships in this release (the code landed in earlier PRs): supply-chain guardrails on add (new/lookalike names, publishing trust checks), cacheDir to relocate the global virtual store, embed API improvements (workspace discovery, manifest types, host-driven confirmations), plus fixes for catalog update, list --lockfile-only, clean cache preservation, native bin launch, and related install/config behavior.

^{Reviewed by Cursor Bugbot for commit a443932. Bugbot is set up for automated code reviews on this repo. Configure here.}

[greptile-apps]

PR title or description contains an excluded keyword.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (2)

• chore: release
• chore(main): release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 368fe442-9d95-4655-8915-a3372f8e6196

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Instruction counts

benchmark	trend	instructions	Δ	wall (min)	Δ
graph	▁▄▄▄▄▄▄▄▄▄▄▄▄▄██████	16,716,630 → 16,713,536	-0.02%	4.34 → 4.83ms	+11.18%
install	▁▁▁▂▇▆▅▆▆▆▆▅▇▆█▇▇███	103,114,269 → 103,119,104	+0.00%	30.06 → 28.47ms	-5.27%
startup	▁▄▄▄▄▄▄▄▄▄▄▄▄▄▇▇▇███	7,677,877 → 7,678,253	+0.00%	3.17 → 3.67ms	+15.61%
tree	▁▄▄▄▄▄▄▄▄▄▄▄▄▄████▇▇	17,731,776 → 17,730,237	-0.01%	5.75 → 4.36ms	-24.28%

No instruction-count regression above 1%.

_{Only instruction counts gate. Wall clock is shown for context — on identical hardware it moves 4-20% run to run.}

_{Measured by tak — instruction-counted CLI benchmarks, stored in this repository's git notes.}

_{a443932187e2 vs 4ef1505b64b9 · measured on this runner, not pushed to the history.}

[github-actions]

Benchmark changes

Versions:

• aube: 1.34.0 -> 1.34.1

Public ratios: warm installs vs Bun 4x -> 6x; warm installs vs pnpm 7x -> 12x.

Benchmark	aube	bun	pnpm
Fresh install (warm cache)	452ms -> 206ms (-54%)	1593ms -> 1294ms (-19%)	3011ms -> 2467ms (-18%)
Fresh install (cold cache)	14707ms -> 14905ms (+1%)	5490ms -> 6050ms (+10%)	9950ms -> 11241ms (+13%)

00ed901 vs 4aac2a9 | freshly benchmarked base/head | aube/bun/pnpm | 2 scenarios | 3 runs | 500mbit/50ms | generated by Codex.