aube: sync upstream v1.35.0

.claude/skills/aube-bump/SKILL.md

@@ -168,9 +168,23 @@ cargo check --workspace --all-targets --message-format short   # iterate until e
 cargo clippy --workspace --all-targets --all-features -- -D warnings
 REAL_HOME="$HOME"; mkdir -p /tmp/clean-aube-home
 env HOME=/tmp/clean-aube-home RUSTUP_HOME="$REAL_HOME/.rustup" CARGO_HOME="$REAL_HOME/.cargo" \
-  cargo test --workspace --lib          # registry/config tests read ~/.npmrc
+  cargo test --workspace                # registry/config tests read ~/.npmrc
 ```
 
+**`--workspace` with NO `--lib` — that is what CI runs** (`aube-parity.yml`, `working-directory:
+vendor/aube`, `run: cargo test --workspace`). `--lib` runs only the in-crate unit tests and SKIPS
+`crates/*/tests/**` entirely, so the fork-discipline integration tests — the ones that pin
+default-preservation, exactly what a bump is most likely to break — never execute. The v1.35 bump
+shipped a green `--lib` run and CI still failed on
+`aube-settings/tests/gvs_disable_list_embedder_default.rs`, whose pinned copy of aube's built-in GVS
+list had gone stale against the new upstream baseline.
+
+**Run aube's suite from inside `vendor/aube` (or the venue), never via `--manifest-path` from the nub
+root.** Cargo reads `.cargo/config.toml` from the INVOCATION directory, and aube's own config sets
+`RUST_TEST_THREADS = "1"` because `aube-util`'s `concurrency` and `http::ticket_cache` tests mutate
+process env and are not thread-safe. Invoking from the nub root silently drops that and those tests
+flake — which reads exactly like a regression your merge caused.
+
 For each error ask: **is this symbol nub delta or upstream?** Then apply the doctrine. Never paper
 over with `.unwrap()`/`.expect()` or by deleting a capability.
 
@@ -245,12 +259,18 @@ applies. Reverting was correct. Let the tests arbitrate; don't defend a graft.
 Grep after every bump — if one vanished, a resolution was wrong:
 
 ```sh
-grep -rn "workspace_markers\|lockfile_basename\|EmbedderProfile\|read_branded_pnpm_config\|env_prefix\|cache_namespace\|engine_context\|env_overlay\|path_prepends\|runtime_node\|cold_path" vendor/aube/crates
+grep -rn "workspace_markers\|lockfile_basename\|virtual_store_subdir\|branded_env_alias_enabled\|read_branded_pnpm_config\|env_prefix\|cache_namespace\|engine_context\|env_overlay\|path_prepends\|runtime_node\|cold_path" vendor/aube/crates
 ```
 
 - **Embedder profile plumbing** — `env_prefix`, `cache_namespace`, `lockfile_basename`,
-  `workspace_markers`, `read_branded_pnpm_config` gating. Holds the brand + config boundary. Largely
-  upstreamed, so it usually converges rather than conflicts.
+  `workspace_markers`, `virtual_store_subdir`, `read_branded_pnpm_config` gating. Holds the brand +
+  config boundary. Largely upstreamed, so it usually converges rather than conflicts. The profile type
+  is `Embedder` (`aube-util/src/identity.rs`), reached via `aube_util::embedder()`.
+  `virtual_store_subdir` earns its place in the grep: the v1.35 bump auto-merged two upstream call sites
+  that hardcoded `aube_store::VIRTUAL_STORE_SUBDIR` (`"virtual-store"`) over nub's profile-named leaf,
+  with **no conflict markers** — it would have shipped silently. `branded_env_alias_enabled`
+  (`aube-util/src/env.rs`) is the single switch gating every `AUBE_*` alias in `settings.toml`, so each
+  bump's new branded settings inherit the boundary from it alone.
 - **Linker** — GVS, collective hidden tree as the sole phantom mechanism, per-package
   force-materialization (`diskMaterializePackages`), workspace-spanning hoisted planning, memoized
   clonedir probes, whole-dir `clonefile` on macOS, direct-exec of native bins.

crates/nub-cli/src/pm_engine/vite_compat.rs

@@ -234,9 +234,17 @@ pub(crate) fn vite_lt_8_1(version: &str) -> bool {
 /// embedder-namespaced to `~/.cache/nub/pm`). This is the realpath prefix of
 /// every store-resident served module, so it is the value Vite must allow. The
 /// leaf name comes from the active embedder (`store` under nub), matching what
-/// `aube_store::Store::virtual_store_dir` writes, so the two never drift. The
-/// embedder profile is registered by the time install runs, so
-/// `aube_store::dirs::cache_dir()` resolves the nub namespace.
+/// `aube_store::Store::virtual_store_dir` writes. The embedder profile is
+/// registered by the time install runs, so `aube_store::dirs::cache_dir()`
+/// resolves the nub namespace.
+///
+/// Only the DEFAULT location is reproduced here. aube v1.35.0 added the
+/// `globalVirtualStoreDir` / `cacheDir` settings, which relocate the real store
+/// at runtime; the resolver for those (`commands::settings_context::
+/// global_virtual_store_dir`) is `pub(crate)` to the aube crate, so nub cannot
+/// consult it without widening that surface. A project that sets either setting
+/// therefore gets a `.modules.yaml` naming the default path rather than the
+/// relocated one, and Vite would not be told to allow the real store.
 fn global_virtual_store_dir() -> Option<PathBuf> {
     aube_store::dirs::cache_dir().map(|c| c.join(aube_util::embedder().virtual_store_subdir))
 }

tests/aube-bats/skips.txt

@@ -43,6 +43,9 @@ install.bats|aube run auto-installs when installed package metadata is missing|'
 install.bats|aube install ignores --network-concurrency=0 and falls back to default|test invokes 'aube -v' — nub's -v is --version (reserved); re-evaluate when the flag wiring lands
 add.bats|aube add: refuses to add to workspace root with aube-workspace.yaml|nub-divergence: aube-workspace.yaml is not consulted (workspace-yaml toggle restricts discovery to pnpm-workspace.yaml), so it cannot define a workspace root — the pnpm-workspace.yaml variant asserts the guard
 add.bats|aube add -w: errors outside a workspace|engine emits pnpm-workspace.yaml (brand-clean via workspace_markers(), PR #77); upstream test asserts aube-workspace.yaml
+update.bats|aube update -r --latest updates a shared catalog entry|catalog fixture declares its workspace in aube-workspace.yaml, which workspace_markers() does not consult, so -r has no workspace root to filter against
+update.bats|aube update -r --latest --no-save leaves the catalog range unchanged|catalog fixture declares its workspace in aube-workspace.yaml, which workspace_markers() does not consult, so -r has no workspace root to filter against
+update.bats|aube update -r --latest updates a named catalog and preserves its prefix|catalog fixture declares its workspace in aube-workspace.yaml, which workspace_markers() does not consult, so -r has no workspace root to filter against
 
 # ── pnpm-parity divergences (decision C: nub extends aube's behavior to match pnpm) ──
 add.bats|aube add --save-peer writes only peerDependencies and does not install|nub dual-writes --save-peer to devDependencies+peerDependencies for pnpm parity (decision C); aube asserts peerDependencies-only
@@ -80,6 +83,7 @@ update.bats|aube update --lockfile-only: refreshes lockfile without populating n
 update.bats|aube update --lockfile-only --latest: bumps direct deps without linking|fixture's committed aube-lock.yaml is invisible: nub's canonical lockfile name is nub.lock
 update.bats|aube update preserves time: entries for direct deps (time-based mode)|fixture's committed aube-lock.yaml is invisible: nub's canonical lockfile name is nub.lock
 update.bats|aube update drops a stray time: block under default resolution (pnpm parity)|fixture's committed aube-lock.yaml is invisible: nub's canonical lockfile name is nub.lock
+update.bats|aube update: workspace update.ignoreDeps takes precedence|update itself succeeds; the assertions grep aube-lock.yaml, and nub's canonical lockfile name is nub.lock
 
 # ── virgin projects self-pin nub via devEngines.packageManager ──────────────
 # On the FIRST package.json-modifying verb in a project nub is first to touch,

vendor/aube/.github/renovate.json

@@ -8,6 +8,12 @@
       "matchManagers": ["cargo"],
       "matchPackageNames": ["/^sigstore-/"],
       "groupName": "sigstore crates"
+    },
+    {
+      "description": "decmpfs 0.1.2 fails to compile for musl targets (FICLONE ioctl request typed c_ulong, which is c_int on musl). Hold at 0.1.0 until upstream fixes it.",
+      "matchManagers": ["cargo"],
+      "matchPackageNames": ["decmpfs"],
+      "allowedVersions": "<=0.1.0"
     }
   ]
 }

vendor/aube/.github/workflows/auto-merge-release.yml

@@ -18,7 +18,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
           fetch-tags: true