[jdx]

Summary

• bump aube and aube-registry dependency requirements from 1.36 to 1.37
• refresh all Aube workspace crates in Cargo.lock to 1.37.0

Why

Aube 1.37.0 is published on crates.io and includes embedded runtime PATH fixes, exact-name trust handling for popular packages, and pnpm trusted dependency support.

Impact

Mise's embedded Aube-based npm functionality now uses Aube 1.37.0. No registry mapping changes are needed because the existing Aube tool entry resolves latest.

Validation

• cargo check
• mise run lint-fix

AI-assisted — Tool: Codex; model: unavailable; version: unavailable.

---

Note

Low Risk
Version-only dependency update; behavior changes come from the published Aube release, not mise code edits.

Overview
Bumps embedded Aube (npm package manager used for npm: installs) from 1.36 to 1.37 by updating aube and aube-registry in Cargo.toml and refreshing the full Aube workspace in Cargo.lock to 1.37.0.

Mise’s in-process Aube integration (aube_host) picks up upstream fixes in 1.37 (embedded runtime PATH, exact-name trust for popular packages, pnpm trusted dependency support) without changing registry mappings or on-disk layout.

^{Reviewed by Cursor Bugbot for commit eb1e6b4. Bugbot is set up for automated code reviews on this repo. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated internal package requirements to version 1.37.
  • No user-facing features or behavior changes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 9e926bde-fac4-4af9-8ed4-6b64531f4410

📥 Commits

Reviewing files that changed from the base of the PR and between d0d2f6f and eb1e6b4.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• Cargo.toml

---

📝 Walkthrough

Walkthrough

The pull request updates the aube and aube-registry dependencies from version 1.36 to 1.37. Existing feature settings remain unchanged.

Changes

Aube dependency update

Layer / File(s)	Summary
Update Aube dependency versions Cargo.toml	The aube and aube-registry dependencies now require version 1.37. Disabled default features and the rustls feature remain enabled as before.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• jdx/mise#11364: Updates the same Aube dependencies in Cargo.toml.
• jdx/mise#11365: Updates the same Aube dependencies to consecutive versions.
• jdx/mise#11479: Performs the preceding version bump for these dependencies.

Suggested reviewers: mise-en-dev, risu729

Poem

A rabbit bumps the crate versions high,
From one-three-six to one-three-seven they fly.
rustls stays tucked in the burrow below,
Default features remain off in the snow.
“Hop!” says the rabbit, “the update is done!”

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the primary change: updating the Aube dependency to version 1.37.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Greptile Summary

Updates the embedded Aube dependency family from 1.36 to 1.37.

• Raises the direct aube and aube-registry requirements to 1.37.
• Refreshes all Aube workspace crate versions and checksums in the lockfile to 1.37.0.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete changed-code defects identified.

The manifest and lockfile consistently upgrade the full Aube crate family to 1.37.0 while retaining the existing feature configuration, and the reported dependency advisories are associated with unchanged pre-existing packages rather than this update.

Important Files Changed

Filename	Overview
Cargo.toml	Updates the two direct Aube dependency requirements consistently from 1.36 to 1.37 without changing feature selection.
Cargo.lock	Refreshes the complete Aube workspace crate family to 1.37.0 with internally consistent registry checksums and no unrelated dependency changes.

_{Reviews (1): Last reviewed commit: "chore(deps): bump aube to 1.37.0" | Re-trigger Greptile}

[github-actions]

Instruction counts

benchmark	trend	instructions	Δ	wall (min)	Δ
env	▇█▇▇█▆▁▁▂▂▁▂▅	84,718,600 → 84,837,076	+0.14%	18.80 → 29.02ms	+54.34%
hook-env	▇▇██▇▇▁▁▁▁▁▁▂	87,067,133 → 87,171,996	+0.12%	19.18 → 32.46ms	+69.21%
ls	▆█▇▇▇▃▄▁▃▂▁▄▅	76,703,505 → 76,718,280	+0.02%	15.36 → 29.43ms	+91.58%
registry	█▇█▆▆▅▁▂▂▂▁▂▇	50,125,911 → 50,235,949	+0.22%	10.60 → 16.15ms	+52.33%
startup	███▆▇▆▁▂▁▁▂▁▇	15,946,612 → 16,046,750	+0.63%	7.73 → 14.07ms	+82.01%

No instruction-count regression above 1%.

_{Only instruction counts gate. Wall clock is shown for context — on identical hardware it moves 4-20% run to run.}

_{Measured by tak — instruction-counted CLI benchmarks, stored in this repository's git notes.}

_{eb1e6b462c04 vs 09321ab67efe · measured on the runner, not pushed to the history.}