chore(main): release 0.9.3

[tinovyatkin]

🤖 I have created a release beep boop

0.9.3 (2026-09-20)

Bug Fixes

• ci: authenticate npm releases with token (c3f0fe6)
• npm: update trusted publishing repository (cac22e0)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (3)

• CHANGELOG.md is excluded by !CHANGELOG.md
• Cargo.lock is excluded by !**/*.lock
• npm/cribo/package.json is excluded by !npm/cribo/package.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Repository: ophi-dev/cribo/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 0f4522a6-286a-4def-8ce6-05500394cef8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: c2092ad4-df64-4fa2-b2c8-496144c01979

📥 Commits

Reviewing files that changed from the base of the PR and between 7a86943 and 1b54aa9.

⛔ Files ignored due to path filters (2)

• CHANGELOG.md is excluded by !CHANGELOG.md
• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• Cargo.toml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The release manifest, workspace package metadata, and version file were updated from 0.9.2 to 0.9.3.

Changes

Release version alignment

Layer / File(s)	Summary
Update release version sources .release-please-manifest.json, Cargo.toml, version.txt	All release version sources now specify 0.9.3.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 5021e

The release metadata is consistently updated to 0.9.3, with no remaining merge-blocking risk identified.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies a release preparation change for version 0.9.3, which matches the version updates in the manifest, workspace package, and version file.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Bencher Report

Project	cribo
Branch	release-please--branches--main
Testbed	ubuntu-latest

Click to view all benchmark results

Benchmark	Latency	Benchmark Result nanoseconds (ns) (Result Δ%)	Upper Boundary nanoseconds (ns) (Limit %)
build_dependency_graph	📈 view plot 🚷 view threshold	467.09 ns (-22.18%) Baseline: 600.22 ns	762.59 ns (61.25%)
bundle_simple_project	📈 view plot 🚷 view threshold	1,447,700.00 ns (-20.83%) Baseline: 1,828,659.84 ns	2,973,019.80 ns (48.69%)
resolve_module_path	📈 view plot 🚷 view threshold	72.26 ns (-32.45%) Baseline: 106.96 ns	147.75 ns (48.90%)

🐰 View full continuous benchmarking report in Bencher

[Copilot]

Pull request overview

Release PR for Cribo 0.9.3, updating the repository’s version metadata and changelog for the new patch release generated by Release Please.

Changes:

• Bump project version to 0.9.3 across Rust workspace metadata (Cargo.toml/Cargo.lock) and version.txt
• Bump npm package version and platform optional dependency versions to 0.9.3
• Add 0.9.3 release entry to CHANGELOG.md and update Release Please manifest

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
version.txt	Updates the single-source text version marker to 0.9.3.
npm/cribo/package.json	Bumps npm package version and aligns platform optional dependency versions to 0.9.3.
CHANGELOG.md	Adds the 0.9.3 release notes section.
Cargo.toml	Updates Rust workspace package version to 0.9.3.
Cargo.lock	Updates the locked cribo package version to 0.9.3.
.release-please-manifest.json	Updates Release Please manifest version to 0.9.3.

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Bencher Report

Project	cribo
Branch	pr-568
Testbed	ubuntu-latest

Click to view all benchmark results

Benchmark	bundle_size	Benchmark Result KB (Result Δ%)	Upper Boundary KB (Limit %)	bundle_time	Benchmark Result ms (Result Δ%)	Upper Boundary ms (Limit %)
httpx	📈 view plot 🚷 view threshold	423.73 (+9.09%) Baseline: 388.41	471.15 (89.93%)	📈 view plot 🚷 view threshold	262.89 (+11.96%) Baseline: 234.81	334.39 (78.62%)
idna	📈 view plot 🚷 view threshold	264.42 (+2.60%) Baseline: 257.73	273.40 (96.71%)	📈 view plot 🚷 view threshold	57.13 (+9.62%) Baseline: 52.11	66.00 (86.56%)
pyyaml	📈 view plot 🚷 view threshold	314.74 (+9.20%) Baseline: 288.23	350.35 (89.84%)	📈 view plot 🚷 view threshold	203.50 (+11.83%) Baseline: 181.97	260.80 (78.03%)
requests	📈 view plot 🚷 view threshold	282.61 (+8.70%) Baseline: 259.99	313.00 (90.29%)	📈 view plot 🚷 view threshold	169.21 (+12.11%) Baseline: 150.93	215.95 (78.35%)
rich	📈 view plot 🚷 view threshold	1,142.64 (+6.38%) Baseline: 1,074.10	1,234.70 (92.54%)	📈 view plot 🚷 view threshold	977.75 (+11.18%) Baseline: 879.42	1,276.30 (76.61%)

🐰 View full continuous benchmarking report in Bencher

[github-actions]

📊 Ecosystem Test Results

📋 Test Status

Test Summary:

• Total: 49
• ✅ Passed: 48
• ❌ Failed: 0
• ⚠️ Errors: 0
• ⏭️ Skipped: 1

📈 Benchmark Results

📊 View detailed benchmark report

📦 Package Bundling Metrics

Package	Bundle Time	Bundle Size
httpx	262.89 ms	423.73 KB
idna	57.13 ms	264.42 KB
pyyaml	203.5 ms	314.74 KB
requests	169.21 ms	282.61 KB
rich	977.75 ms	1142.64 KB

Benchmark metrics are tracked via Bencher.dev

📊 View detailed performance trends and comparisons on the Bencher dashboard.

_{Generated by ecosystem-tests workflow}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 65e3e3f73f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Include all commits in the 0.9.3 release notes

When v0.9.3 is tagged at this commit, its range also contains e31b31e (docs(npm)), d988a3d (chore(deps)), and 5a41ba6 (chore(deps)), but this section stops at cac22e0. Because release-please-config.json explicitly marks both docs and chore(deps) entries as visible, the published changelog and generated GitHub release will omit changes that shipped in 0.9.3; regenerate the notes from the current parent before releasing.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0bbfefe448

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Remove the reverted token-authentication note

For maintainers using these notes to configure or troubleshoot the 0.9.3 npm release, this entry incorrectly says token authentication shipped: cac22e0, the next listed change, removes NODE_AUTH_TOKEN again, and the released workflow publishes through trusted-publishing OIDC with no npm token (.github/workflows/release.yml, Publish to npm). Keeping this transient, fully reverted change in the published changelog misstates the release's authentication requirements.

Useful? React with 👍 / 👎.