jdx · Jul 31, 2026 · Jul 31, 2026
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -31,7 +31,7 @@ inherits = "release"
 panic = "unwind"
 
 [workspace.package]
-version = "1.36.0"
+version = "1.37.0"
 edition = "2024"
 # Kept at the floor mise can build with (its distro packaging pins the
 # toolchain) so mise can embed the library crates. CI enforces this via
@@ -191,19 +191,19 @@ diffy = "0.5"
 # Internal crates — `version` is required so `cargo publish` can resolve
 # transitive crate dependencies via crates.io. release-plz keeps these
 # versions in sync with [workspace.package].version during release PRs.
-aube = { path = "crates/aube", version = "1.36.0", default-features = false }
-aube-codes = { path = "crates/aube-codes", version = "1.36.0" }
-aube-settings = { path = "crates/aube-settings", version = "1.36.0" }
-aube-resolver = { path = "crates/aube-resolver", version = "1.36.0" }
-aube-registry = { path = "crates/aube-registry", version = "1.36.0" }
-aube-store = { path = "crates/aube-store", version = "1.36.0" }
-aube-linker = { path = "crates/aube-linker", version = "1.36.0" }
-aube-lockfile = { path = "crates/aube-lockfile", version = "1.36.0" }
-aube-manifest = { path = "crates/aube-manifest", version = "1.36.0" }
-aube-runtime = { path = "crates/aube-runtime", version = "1.36.0" }
-aube-scripts = { path = "crates/aube-scripts", version = "1.36.0" }
-aube-workspace = { path = "crates/aube-workspace", version = "1.36.0" }
-aube-util = { path = "crates/aube-util", version = "1.36.0" }
+aube = { path = "crates/aube", version = "1.37.0", default-features = false }
+aube-codes = { path = "crates/aube-codes", version = "1.37.0" }
+aube-settings = { path = "crates/aube-settings", version = "1.37.0" }
+aube-resolver = { path = "crates/aube-resolver", version = "1.37.0" }
+aube-registry = { path = "crates/aube-registry", version = "1.37.0" }
+aube-store = { path = "crates/aube-store", version = "1.37.0" }
+aube-linker = { path = "crates/aube-linker", version = "1.37.0" }
+aube-lockfile = { path = "crates/aube-lockfile", version = "1.37.0" }
+aube-manifest = { path = "crates/aube-manifest", version = "1.37.0" }
+aube-runtime = { path = "crates/aube-runtime", version = "1.37.0" }
+aube-scripts = { path = "crates/aube-scripts", version = "1.37.0" }
+aube-workspace = { path = "crates/aube-workspace", version = "1.37.0" }
+aube-util = { path = "crates/aube-util", version = "1.37.0" }
 
 [profile.dev]
 debug = 1
diff --git a/aube.usage.kdl b/aube.usage.kdl
@@ -2,7 +2,7 @@
 min_usage_version "4.0"
 name aube
 bin aube
-version "1.36.0"
+version "1.37.0"
 about "A fast Node.js package manager"
 usage "Usage: aube [OPTIONS] [COMMAND]"
 flag "-C --dir --cd --prefix" help="Change to directory before running (like `make -C` or `mise --cd`)" global=#true {

diff --git a/crates/aube-codes/CHANGELOG.md b/crates/aube-codes/CHANGELOG.md
@@ -7,6 +7,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-codes-v1.36.0...aube-codes-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Fixed
+
+- *(patch)* preserve existing patches and refresh hashes ([#1196](https://github.com/jdx/aube/pull/1196))
+- *(update)* warn when release age hides upgrades ([#1193](https://github.com/jdx/aube/pull/1193))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-codes-v1.35.0...aube-codes-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-linker/CHANGELOG.md b/crates/aube-linker/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-linker-v1.36.0...aube-linker-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-linker-v1.35.0...aube-linker-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-lockfile/CHANGELOG.md b/crates/aube-lockfile/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-lockfile-v1.36.0...aube-lockfile-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-lockfile-v1.35.0...aube-lockfile-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-manifest/CHANGELOG.md b/crates/aube-manifest/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-manifest-v1.36.0...aube-manifest-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-manifest-v1.35.0...aube-manifest-v1.36.0) - 2026-07-29
 
 ### Added

diff --git a/crates/aube-registry/CHANGELOG.md b/crates/aube-registry/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-registry-v1.36.0...aube-registry-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-registry-v1.35.0...aube-registry-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-resolver/CHANGELOG.md b/crates/aube-resolver/CHANGELOG.md
@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-resolver-v1.36.0...aube-resolver-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Fixed
+
+- *(update)* warn when release age hides upgrades ([#1193](https://github.com/jdx/aube/pull/1193))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-resolver-v1.35.0...aube-resolver-v1.36.0) - 2026-07-29
 
 ### Fixed

diff --git a/crates/aube-runtime/CHANGELOG.md b/crates/aube-runtime/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-runtime-v1.36.0...aube-runtime-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-runtime-v1.35.0...aube-runtime-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-scripts/CHANGELOG.md b/crates/aube-scripts/CHANGELOG.md
@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-scripts-v1.36.0...aube-scripts-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Fixed
+
+- *(embed)* keep wrapper node first on PATH ([#1188](https://github.com/jdx/aube/pull/1188))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-scripts-v1.35.0...aube-scripts-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-settings/CHANGELOG.md b/crates/aube-settings/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-settings-v1.36.0...aube-settings-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-settings-v1.35.0...aube-settings-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-store/CHANGELOG.md b/crates/aube-store/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-store-v1.36.0...aube-store-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-store-v1.35.0...aube-store-v1.36.0) - 2026-07-29
 
 ### Other

diff --git a/crates/aube-util/CHANGELOG.md b/crates/aube-util/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.37.0](https://github.com/jdx/aube/compare/aube-util-v1.36.0...aube-util-v1.37.0) - 2026-07-31
+
+### Added
+
+- *(scripts)* use pnpm trusted dependency list ([#1199](https://github.com/jdx/aube/pull/1199))
+
+### Other
+
+- refresh benchmarks for v1.36.0 ([#1185](https://github.com/jdx/aube/pull/1185))
+
 ## [1.36.0](https://github.com/jdx/aube/compare/aube-util-v1.35.0...aube-util-v1.36.0) - 2026-07-29
 
 ### Other