docs: add releases nav and aube lock by jdx · Pull Request #849 · jdx/hk

jdx · 2026-04-19T16:32:09Z

Summary

add a Releases link to the docs nav
switch docs and CI JS installs from bun to aube via mise
replace bun.lock with aube-lock.yaml, add docs/aube-lock.yaml, and ignore .aube/

Validation

git diff --check
mise run docs:build

Note

Medium Risk
Moderate risk because it changes the CI/autofix dependency installation command and replaces the JS lockfile, which could break builds if aube or lock resolution differs from bun. Product/runtime code is otherwise unaffected aside from a small docs nav change.

Overview
Switches CI and autofix workflows from running bun i to mise x -- aube install for JavaScript dependency installation.

Replaces bun.lock with a new aube-lock.yaml (and ignores the .aube/ directory), and adds a docs-only navigation link to GitHub Releases in docs/.vitepress/config.mts.

^{Reviewed by Cursor Bugbot for commit 0ec9137. Bugbot is set up for automated code reviews on this repo. Configure here.}

greptile-apps · 2026-04-19T16:33:43Z

Greptile Summary

This PR migrates the project's JS dependency management from bun to aube (a pnpm-compatible tool managed via mise), replacing bun.lock with aube-lock.yaml lockfiles and updating all CI, autofix, hook, and task runner references accordingly. It also adds a Releases link to the VitePress docs nav.

The new aube-lock.yaml at the repo root matches the *.yaml prettier glob defined in hk.pkl, but .prettierignore has not been updated to exclude it — the pre-commit hook will run Prettier over the lockfile on any commit that stages it.

Confidence Score: 4/5

Safe to merge after adding lockfiles to .prettierignore to prevent the pre-commit hook from corrupting them.

One P1 finding: the new aube-lock.yaml files are not excluded from the Prettier pre-commit hook, which could reformat and corrupt them on the next relevant commit. All other changes are straightforward toolchain swaps with no logic impact.

.prettierignore — needs entries for aube-lock.yaml and docs/aube-lock.yaml.

Important Files Changed

Filename	Overview
.github/workflows/ci.yml	Replaces all four `mise x -- bun i` install steps with `mise x -- aube install`; no other logic changes.
.github/workflows/autofix.yml	Switches install command from `mise x -- bun i` to `mise x -- aube install`; straightforward one-line change.
docs/.vitepress/config.mts	Adds a Releases nav entry pointing to the GitHub releases page; no logic changes.
.prettierignore	Not updated to exclude the new `aube-lock.yaml` files; the `*.yaml` glob in the Prettier hook will pick them up on commit.
mise.toml	Adds `aube = "latest"` to managed tools; `bun` is no longer listed.
hk.pkl	ESLint step prefix updated to `aube run`, consistent with the toolchain switch.
aube-lock.yaml	New pnpm-v9-format lockfile for root workspace dependencies, replacing `bun.lock`.
docs/aube-lock.yaml	Separate lockfile used when `aube install` is run from within the `docs/` directory via mise task.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Developer commits] --> B{Staged files match *.yaml glob?}
    B -- Yes --> C[hk.pkl prettier step runs]
    B -- No --> G[Skip prettier]
    C --> D{aube-lock.yaml in .prettierignore?}
    D -- No current --> E[Prettier reformats aube-lock.yaml]
    D -- Yes fix --> F[Lockfile skipped]
    E --> H[Potentially corrupted lockfile committed]
    F --> I[Lockfile unchanged]

Comments Outside Diff (1)

.prettierignore, line 4 (link)

Lockfile exposed to Prettier reformatting

The root aube-lock.yaml matches the *.yaml glob used by the Prettier step in hk.pkl. On any commit that stages aube-lock.yaml, the pre-commit hook will run Prettier over it, which may alter formatting and produce a lockfile that aube rejects (or silently differ from what aube generates). Adding both lockfiles to .prettierignore prevents this.

_{Reviews (4): Last reviewed commit: "docs: match workspace importer to manife..." | Re-trigger Greptile}

gemini-code-assist

Code Review

This pull request migrates the project's dependency management from Bun to Aube, which includes introducing new lockfiles, updating task definitions, and adjusting tool configurations. It also adds a 'Releases' link to the documentation site. The review feedback highlights that the updated package.json manifest files were omitted from the PR; these files are necessary to maintain consistency with the new lockfiles and ensure proper dependency resolution across environments.

gemini-code-assist · 2026-04-19T16:34:34Z

@@ -0,0 +1,509 @@
+lockfileVersion: '9.0'


The PR introduces aube-lock.yaml and docs/aube-lock.yaml but omits the corresponding package.json manifest files. Since the lockfiles show significant changes in the direct dependency lists (e.g., the addition of acorn in the root and numerous packages in docs), the manifests must have been modified. Please include the updated package.json files to ensure consistency and allow for proper dependency resolution by other developers and CI environments.

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0ec9137. Configure here.}

cursor · 2026-04-19T18:03:21Z

+    dependencies:
+      acorn:
+        specifier: ^6.0.0 || ^7.0.0 || ^8.0.0
+        version: 8.16.0


Lockfile lists phantom acorn root dependency not in package.json

Low Severity

The aube-lock.yaml importers section for the root workspace lists acorn as a direct dependency with specifier ^6.0.0 || ^7.0.0 || ^8.0.0, but the root package.json only declares eslint and typescript as dependencies. That specifier matches the acorn-jsx peer dependency on acorn, suggesting the lockfile generator incorrectly promoted a transitive peer dependency to a direct root dependency. This creates a mismatch between package.json and the lockfile that could cause confusion or unexpected behavior if the lockfile is used to audit or reproduce dependencies.

^{Reviewed by Cursor Bugbot for commit 0ec9137. Configure here.}

@jdx

### 🚀 Features - **(check)** implement --plan, --why, and --json by [@jdx](https://github.com/jdx) in [#848](#848) - **(cocogitto)** add cocogitto conventional commits config to hk builtin config by [@hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#838](#838) - **(git)** support GIT_DIR/GIT_WORK_TREE for bare-repo dotfile managers by [@jdx](https://github.com/jdx) in [#847](#847) - **(install)** use Git 2.54 config-based hooks with --global support by [@jdx](https://github.com/jdx) in [#853](#853) ### 🐛 Bug Fixes - use text progress in CI by [@jdx](https://github.com/jdx) in [#845](#845) ### 📚 Documentation - generalize agent guidelines by [@jdx](https://github.com/jdx) in [#846](#846) - add releases nav and aube lock by [@jdx](https://github.com/jdx) in [#849](#849) ### 🔍 Other Changes - bump communique to 1.0.1 by [@jdx](https://github.com/jdx) in [#850](#850) ### 📦️ Dependency Updates - update actions-rust-lang/setup-rust-toolchain digest to 2b1f5e9 by [@renovate[bot]](https://github.com/renovate[bot]) in [#832](#832) - update anthropics/claude-code-action digest to c3d45e8 by [@renovate[bot]](https://github.com/renovate[bot]) in [#833](#833) - update rust crate tokio to v1.52.1 by [@renovate[bot]](https://github.com/renovate[bot]) in [#834](#834) - update actions/upload-pages-artifact action to v5 by [@renovate[bot]](https://github.com/renovate[bot]) in [#835](#835) - update taiki-e/upload-rust-binary-action digest to f0d45ae by [@renovate[bot]](https://github.com/renovate[bot]) in [#839](#839) - update rust crate clx to v2 by [@renovate[bot]](https://github.com/renovate[bot]) in [#836](#836) - update anthropics/claude-code-action digest to 0d2971c by [@renovate[bot]](https://github.com/renovate[bot]) in [#841](#841) - update anthropics/claude-code-action digest to 38ec876 by [@renovate[bot]](https://github.com/renovate[bot]) in [#842](#842) - lock file maintenance by [@renovate[bot]](https://github.com/renovate[bot]) in [#851](#851)  --- > [!NOTE] > **Low Risk** > Low risk release bookkeeping: version bumps and doc/CLI artifact updates, plus minor dependency patch updates in `Cargo.lock`. No functional Rust source changes are included in this diff. > > **Overview** > Bumps `hk` to **v1.44.0** and publishes the corresponding release notes in `CHANGELOG.md`. > > Updates generated/packaged artifacts to match the new version (CLI docs/specs and Pkl package URLs in docs/examples), and refreshes `Cargo.lock` for the release (including patch-level updates like `rustls` and `winnow`). > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit a36c7a6. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>  Co-authored-by: mise-en-dev <123107610+mise-en-dev@users.noreply.github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [hk](https://github.com/jdx/hk) | minor | `1.43.0` → `1.45.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>jdx/hk (hk)</summary> ### [`v1.45.0`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1450---2026-05-04) [Compare Source](jdx/hk@v1.44.3...v1.45.0) ##### 🚀 Features - **(builtins)** add `buildifier` format and lint built-ins by [@plx](https://github.com/plx) in [#896](jdx/hk#896) ##### 🐛 Bug Fixes - **(step)** only auto-batch when rendered command exceeds ARG\_MAX by [@jdx](https://github.com/jdx) in [#901](jdx/hk#901) ##### 📚 Documentation - thank Namespace for GitHub Actions runner support by [@jdx](https://github.com/jdx) in [#895](jdx/hk#895) ##### 🔍 Other Changes - **(ci)** use !cancelled() instead of always() for final job by [@jdx](https://github.com/jdx) in [#906](jdx/hk#906) - **(docs)** remove shrill.en.dev analytics script by [@jdx](https://github.com/jdx) in [#903](jdx/hk#903) - remove rust-cache from release jobs by [@jdx](https://github.com/jdx) in [#893](jdx/hk#893) - invert CLAUDE.md/AGENTS.md so AGENTS.md is canonical by [@jdx](https://github.com/jdx) in [#905](jdx/hk#905) - set dev profile debug to 1 by [@jdx](https://github.com/jdx) in [#907](jdx/hk#907) ##### 📦️ Dependency Updates - update anthropics/claude-code-action digest to [`fefa07e`](jdx/hk@fefa07e) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#897](jdx/hk#897) - update jdx/mise-action digest to [`1648a78`](jdx/hk@1648a78) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#898](jdx/hk#898) - update apple-actions/import-codesign-certs action to v7 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#900](jdx/hk#900) - update autofix-ci/action action to v1.3.4 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#899](jdx/hk#899) - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#908](jdx/hk#908) ##### New Contributors - [@plx](https://github.com/plx) made their first contribution in [#896](jdx/hk#896) ### [`v1.44.3`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1443---2026-04-30) [Compare Source](jdx/hk@v1.44.2...v1.44.3) ##### 🐛 Bug Fixes - **(hook)** do not stage fixes when fail\_on\_fix=true by [@jdx](https://github.com/jdx) in [#892](jdx/hk#892) - use site domain for plausible data-domain by [@jdx](https://github.com/jdx) in [#886](jdx/hk#886) - make text-mode progress output usable in CI by [@jdx](https://github.com/jdx) in [#890](jdx/hk#890) ##### 📚 Documentation - prefix GitHub star count with ★ glyph by [@jdx](https://github.com/jdx) in [#883](jdx/hk#883) ##### 🔍 Other Changes - **(release)** dedupe sponsor section in release notes by [@jdx](https://github.com/jdx) in [#881](jdx/hk#881) - switch analytics from gtm/goatcounter to plausible by [@jdx](https://github.com/jdx) in [#885](jdx/hk#885) - migrate to namespace.so runners by [@jdx](https://github.com/jdx) in [#891](jdx/hk#891) ### [`v1.44.2`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1442---2026-04-26) [Compare Source](jdx/hk@v1.44.1...v1.44.2) ##### 🐛 Bug Fixes - **(builtins)** silence pklr deprecation warnings on Builtins.pkl load by [@jdx](https://github.com/jdx) in [#880](jdx/hk#880) - **(ci)** serialize docs lint step by [@jdx](https://github.com/jdx) in [#874](jdx/hk#874) - **(config)** include main pkl path in cache fresh files by [@jdx](https://github.com/jdx) in [#879](jdx/hk#879) - **(docs)** stack banner message and link on mobile by [@jdx](https://github.com/jdx) in [#865](jdx/hk#865) - **(docs)** pin banner close button to top-right corner on mobile by [@jdx](https://github.com/jdx) in [#867](jdx/hk#867) ##### 📚 Documentation - **(site)** show release version and github stars by [@jdx](https://github.com/jdx) in [#872](jdx/hk#872) ##### 🔍 Other Changes - add pr-closer workflow by [@jdx](https://github.com/jdx) in [#876](jdx/hk#876) ##### 📦️ Dependency Updates - bump communique 1.0.3 → 1.0.4 by [@jdx](https://github.com/jdx) in [#868](jdx/hk#868) - update anthropics/claude-code-action digest to [`2da6cfa`](jdx/hk@2da6cfa) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#869](jdx/hk#869) - update anthropics/claude-code-action digest to [`567fe95`](jdx/hk@567fe95) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#870](jdx/hk#870) - bump communique to 1.1.2 by [@jdx](https://github.com/jdx) in [#875](jdx/hk#875) ### [`v1.44.1`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1441---2026-04-24) [Compare Source](jdx/hk@v1.44.0...v1.44.1) ##### 🐛 Bug Fixes - **(git)** skip untracked scan when HK\_STASH\_UNTRACKED=false by [@jdx](https://github.com/jdx) in [#861](jdx/hk#861) - **(run)** add post-commit and pre-rebase subcommands by [@jdx](https://github.com/jdx) in [#858](jdx/hk#858) ##### 📚 Documentation - **(install)** recommend global hooks as primary setup path by [@jdx](https://github.com/jdx) in [#855](jdx/hk#855) - add cross-site announcement banner by [@jdx](https://github.com/jdx) in [#857](jdx/hk#857) - respect banner expires field by [@jdx](https://github.com/jdx) in [#862](jdx/hk#862) ##### 🔍 Other Changes - vendor bats test helpers instead of git submodules by [@jdx](https://github.com/jdx) in [#859](jdx/hk#859) ##### 📦️ Dependency Updates - bump communique to 1.0.3 by [@jdx](https://github.com/jdx) in [#863](jdx/hk#863) - update anthropics/claude-code-action digest to [`e58dfa5`](jdx/hk@e58dfa5) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#864](jdx/hk#864) ### [`v1.44.0`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1440---2026-04-23) [Compare Source](jdx/hk@v1.43.0...v1.44.0) ##### 🚀 Features - **(check)** implement --plan, --why, and --json by [@jdx](https://github.com/jdx) in [#848](jdx/hk#848) - **(cocogitto)** add cocogitto conventional commits config to hk builtin config by [@hituzi-no-sippo](https://github.com/hituzi-no-sippo) in [#838](jdx/hk#838) - **(git)** support GIT\_DIR/GIT\_WORK\_TREE for bare-repo dotfile managers by [@jdx](https://github.com/jdx) in [#847](jdx/hk#847) - **(install)** use Git 2.54 config-based hooks with --global support by [@jdx](https://github.com/jdx) in [#853](jdx/hk#853) ##### 🐛 Bug Fixes - use text progress in CI by [@jdx](https://github.com/jdx) in [#845](jdx/hk#845) ##### 📚 Documentation - generalize agent guidelines by [@jdx](https://github.com/jdx) in [#846](jdx/hk#846) - add releases nav and aube lock by [@jdx](https://github.com/jdx) in [#849](jdx/hk#849) ##### 🔍 Other Changes - **(release)** append en.dev sponsor blurb to release notes by [@jdx](https://github.com/jdx) in [#854](jdx/hk#854) - bump communique to 1.0.1 by [@jdx](https://github.com/jdx) in [#850](jdx/hk#850) ##### 📦️ Dependency Updates - update actions-rust-lang/setup-rust-toolchain digest to [`2b1f5e9`](jdx/hk@2b1f5e9) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#832](jdx/hk#832) - update anthropics/claude-code-action digest to [`c3d45e8`](jdx/hk@c3d45e8) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#833](jdx/hk#833) - update rust crate tokio to v1.52.1 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#834](jdx/hk#834) - update actions/upload-pages-artifact action to v5 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#835](jdx/hk#835) - update taiki-e/upload-rust-binary-action digest to [`f0d45ae`](jdx/hk@f0d45ae) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#839](jdx/hk#839) - update rust crate clx to v2 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#836](jdx/hk#836) - update anthropics/claude-code-action digest to [`0d2971c`](jdx/hk@0d2971c) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#841](jdx/hk#841) - update anthropics/claude-code-action digest to [`38ec876`](jdx/hk@38ec876) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#842](jdx/hk#842) - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#851](jdx/hk#851) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

docs: add releases nav and aube lock

51f8d09

gemini-code-assist Bot reviewed Apr 19, 2026

View reviewed changes

docs: include linux native packages in aube locks

3f1a356

cursor Bot reviewed Apr 19, 2026

View reviewed changes

Comment thread aube-lock.yaml

jdx added 2 commits April 19, 2026 12:55

docs: include docs workspace in aube lock

9afa37e

docs: match workspace importer to manifest

0ec9137

cursor Bot reviewed Apr 19, 2026

View reviewed changes

jdx merged commit 6cce30d into main Apr 19, 2026
22 checks passed

jdx deleted the codex/docs-releases-aube branch April 19, 2026 18:08

jdx mentioned this pull request Apr 19, 2026

chore: release v1.44.0 #837

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

docs: add releases nav and aube lock#849

docs: add releases nav and aube lock#849
jdx merged 4 commits intomainfrom
codex/docs-releases-aube

jdx commented Apr 19, 2026 •

edited by cursor Bot

Loading

Uh oh!

greptile-apps Bot commented Apr 19, 2026 •

edited

Loading

Comments Outside Diff (1)

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

gemini-code-assist Bot Apr 19, 2026

Uh oh!

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Apr 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

jdx commented Apr 19, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Validation

Uh oh!

greptile-apps Bot commented Apr 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 4/5

Important Files Changed

Flowchart

Comments Outside Diff (1)

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist Bot Apr 19, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Apr 19, 2026

Choose a reason for hiding this comment

Lockfile lists phantom acorn root dependency not in package.json

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

jdx commented Apr 19, 2026 •

edited by cursor Bot

Loading

greptile-apps Bot commented Apr 19, 2026 •

edited

Loading

Lockfile lists phantom `acorn` root dependency not in `package.json`