chore(main): release 0.8.0

[tinovyatkin]

🤖 I have created a release beep boop

0.8.0 (2026-07-16)

Features

• add qualname (84bce8d)
• add bun and dprint installation to copilot setup workflow (#287) (751c19c)
• add Claude Code hook to prevent direct commits to main branch (8df0a68)
• add httpx to ecosystem tests and type_checking_imports fixture (#306) (dc382e7)
• add idna to ecosystem tests with improved test infrastructure (#372) (6344432)
• bundler: ensure sys and types imports follow deterministic ordering (#113) (05738ee)
• bundler: implement static bundling to eliminate runtime exec() calls (#104) (fceb34f)
• bundler: integrate unused import trimming into static bundler (#108) (d745a4f)
• bundler: migrate unused imports trimmer to graph-based approach (#115) (5e94496)
• bundler: semantically aware bundler (#118) (d0be9f8)
• centralize init and main handling via python module (#349) (9c3a79c)
• ci: add rust-code-analysis-cli (43523e1)
• ci: only show rust analyzer for changed files (#132) (de7a875)
• ecosystem tests foundation (#163) (6695093)
• enhance circular dependency detection and prepare for import rewriting (#126) (6a84d5f)
• implement AST visitor pattern for comprehensive import discovery (#130) (a890b86)
• implement centralized namespace management system (#263) (c9b19f0)
• implement static importlib support and file deduplication (#157) (77b6609)
• implement tree-shaking to remove unused code and imports (#152) (26c2933)
• integrate Bencher.dev for ecosystem bundling metrics (#379) (25c293c)
• post-checkout hooks (9063ae2)
• test: enhance snapshot framework with YAML requirements and third-party import support (#134) (6770e0b)
• unify bundling and tree-shaking analysis facts (#468) (21b9cb3)
• use taplo and stable rust (8629456)

Bug Fixes

• add certifi to typos allow list (#456) (9f425ea)
• add module namespace assignments for wildcard imports in wrapper inits (#318) (553ef44)
• address review comments from PR #372 (#377) (632e9b7)
• adjust OpenAI API curl (26ef069)
• adjust OpenAI API curling (303e5ad)
• ai: improve changelog prompt and use cheaper model (052fb78)
• ai: remove LSP recommendations (9ca7676)
• apply renames to metaclass keyword arguments in class definitions (#295) (01f2e1a)
• assign init function results to modules in sorted initialization (#222) (0438108)
• attach entry module exports to namespace for package imports (#366) (917cc4d)
• base branch bench missed feature (011ffcd)
• bencher install (431ae61)
• bundler: apply symbol renames to class base classes during inheritance (#188) (fa2adc4)
• bundler: apply symbol renames to class base classes during inheritance (#189) (909bd09)
• bundler: ensure future imports are correctly hoisted and late imports handled (#112) (1e8ac71)
• bundler: handle version export and eliminate duplicate module assignments (#213) (9c62e03)
• bundler: handle circular dependencies with module-level attribute access (924b9f1)
• bundler: handle circular dependencies with module-level attribute access (#219) (ffb49c0)
• bundler: handle conditional imports in if/else and try/except blocks (#184) (de37ad2)
• bundler: preserve import aliases and prevent duplication in hoisted imports (#135) (632658e)
• bundler: prevent duplicate namespace assignments when processing parent modules (#216) (3bcf2a4)
• bundler: prevent transformation of Python builtins to module attributes (#212) (1a9b7a9)
• bundler: resolve all fixable xfail import test cases (#120) (bad94a2)
• bundler: resolve forward reference issues in cross-module dependencies (#197) (41b633d)
• bundler: resolve Python exec scoping and enable module import detection (#97) (5dab748)
• bundler: skip import assignments for tree-shaken symbols (#214) (6827e4c)
• bundler: wrap modules in circular deps that access imported attributes (#218) (3f0b093)
• centralize namespace management to prevent duplicates and fix special module handling (#261) (c23e8d2)
• ci: work around maturin 1.11+ bin bindings regression (#453) (349ad62)
• collect dependencies from nested classes and functions in graph builder (#272) (b021ae1)
• copilot setup steps (3e1ecd0)
• correctly reference symbols from wrapper modules in namespace assignments (#298) (91e76e7)
• deps: update env_logger to 0.11.10 to deduplicate anstream (#454) (9ef981c)
• deps: upgrade ruff crates from 0.11.12 to 0.11.13 (#122) (9e6c02d)
• ecosystem testing testing advances (#165) (a4db95f)
• ensure private symbols imported by other modules are exported (#328) (0f467ea)
• ensure tree-shaking preserves imports within used functions and classes (#330) (085695c)
• handle built-in type re-exports correctly in bundled output (#240) (4ab4e83)
• handle circular dependencies with version module imports (#314) (c2512e9)
• handle circular dependencies with stdlib-conflicting module names (#281) (6ea838e)
• handle circular imports from parent init modules (#362) (a8cc60f)
• handle lifted globals correctly in module transformation (#325) (ff3ae54)
• handle locals() calls in wrapped modules by static analysis (#308) (c502713)
• handle metaclass dependencies in class ordering (1c67f3e)
• handle relative imports in wrapper module init functions (#356) (4c7dfb4)
• handle stdlib module name conflicts in bundler (#279) (c800b32)
• handle submodules in all exports correctly (8b14937)
• handle submodules in all exports correctly (#226) (b09bce3)
• handle wildcard imports correctly for wrapper and inlined modules (#294) (26d5617)
• handle wildcard imports from inlined modules that re-export wrapper module symbols (#311) (940f275)
• handle wildcard imports in wrapper modules with setattr pattern (#310) (4db103a)
• handle wrapper module imports in function default parameters (#329) (2b4f1bc)
• implement function-scoped import rewriting for circular dependency resolution (8cc923f), closes #128
• improve class dependency ordering for metaclass and class body references (#327) (e062df7)
• improve class ordering for cross-module inheritance (#277) (392b42a)
• include all module-scope symbols in namespace to support private imports (#225) (77b77a5)
• include explicitly imported private symbols in circular dependencies (#312) (94e7913)
• initialize wrapper modules for lazy imports in inlined modules (#289) (2db1459)
• install msbuild on windows (92ffaac)
• keep PyPI attestations (6e6b77b)
• prefer init.py over main.py for directory entry points (#364) (2c1e6a9)
• preserve aliased imports accessed via module attributes during tree-shaking (#301) (30916f4)
• preserve module docstrings in bundled output (#386) (248a3f0)
• preserve stdlib imports and fix module initialization order for wrapper modules (#283) (6201f22)
• preserve symbols accessed dynamically via locals/globals with all (#317) (fafc7e4)
• prevent code generator from referencing tree-shaken symbols (#305) (b8672c4)
• prevent globals() transformation in functions within circular dependency modules (#368) (0e6baea)
• prevent stdlib module name conflicts in bundled imports (#275) (59b9266)
• regenerate lockfile (b036c9c)
• relative imports being incorrectly classified as stdlib imports (#267) (a703f0e)
• remove bin from platform specific npm packages (1aa8c90)
• remove hardcoded http.cookiejar handling with generic submodule import solution (#331) (750086d)
• remove unnecessary statement reordering and self-referential wildcard imports (9e1c8ae)
• remove unused code to resolve clippy warnings (bd2ace6)
• rename bundled_exit_code to python_exit_code for clarity (72f3846)
• repack aarch64 wheel before PyPI (5921b80)
• repack aarch64 wheel before TestPyPI (33e9e04)
• replace cast with try_from for leading_dots conversion (cea9082)
• replace unnecessary Debug formatting with Display for paths (#260) (e4c6357)
• resolve all completely statically (#247) (fb82a19)
• resolve clippy pedantic warnings for pass-by-value arguments (#252) (4ac881c)
• resolve forward reference errors and redundant namespace creation (#241) (3cef9eb)
• resolve forward reference errors in hard dependency class inheritance (#232) (b429a7e)
• resolve metaclass forward references and tree-shaking for same-module dependencies (#296) (dae1969)
• resolve metaclass forward references and tree-shaking for same-module dependencies (#297) (d734046)
• skip corrupt aarch64 manylinux wheel (3535ab4)
• skip self-referential re-export assignments in bundler (20d8a62)
• split bundler.rs into directory module (#461) (5d7c6e1)
• test: enforce correct fixture naming for Python execution failures (#139) (b48923e)
• track all dependencies in side-effect modules during tree-shaking (#288) (c1ef6d2)
• tree-shaking: preserve entry module classes and fix namespace duplication (#186) (a97c2b6)
• update namespace creation detection for stdlib proxy (#336) (56bdbb0)
• use case-insensitive file extension comparison in util.rs (6525c4d)
• use curl to call OpenAI API (b83cb4f)
• use original name and declare global (#221) (04d549b)

Performance Improvements

• test: fix slow cli_stdout tests by using pre-built binary (#149) (e7de937)
• use Arc<ModModule> in module AST maps to avoid cloning all ASTs in prepare_modules (#465) (ce6b414)

Miscellaneous Chores

• release 0.5.0 (5047e64)
• release 0.6.0 (54c8155)
• release 0.7.0 (5c38833)
• release 0.8.0 (dc3ef59)

---

This PR was generated with Release Please. See documentation.

Summary by CodeRabbit

• Chores
  • Updated the application release version to 0.8.0 across release metadata and package records.

[coderabbitai]

📝 Walkthrough

Walkthrough

Release metadata is updated from version 0.8.5 to 0.8.0 in the release manifest, Cargo workspace package metadata, and version.txt.

Changes

Release metadata

Layer / File(s)	Summary
Align release version metadata .release-please-manifest.json, Cargo.toml, version.txt	The three version records are changed from 0.8.5 to 0.8.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The PR only bumps release versions and does not implement the circular-dependency import rewriting required by #128.	Add the bundling and import-rewriting changes, plus the required tests and limitation documentation from issue #128.
Out of Scope Changes check	⚠️ Warning	The changes are release-version metadata updates and do not relate to the requested circular-dependency fix.	Remove unrelated release-only changes or include the actual bundling fix and associated tests from the linked issue.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: preparing the 0.8.0 release.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request formalizes the release of version 0.8.0 for the project. It incorporates a substantial set of updates, including the implementation of a semantically aware bundler, improved tree-shaking logic, and enhanced circular dependency resolution. Additionally, the release includes various infrastructure improvements to the ecosystem testing suite and CI/CD workflows.

Highlights

• Version Update: Updated the project version to 0.8.0 across all configuration files, including manifest, Cargo, npm, and version tracking files.
• Changelog Documentation: Generated comprehensive release notes for version 0.8.0, documenting significant advancements in the bundler, tree-shaking, and CI/CD infrastructure.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request downgrades the project version from 0.8.5 to 0.8.0 across multiple files, including the Release Please manifest, Cargo.toml, Cargo.lock, npm package.json, and version.txt, and prepends the changelog for version 0.8.0 to CHANGELOG.md. All review comments have been filtered out as they pertain to non-code changes (version numbers), so there is no additional feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[github-actions]

📊 Ecosystem Test Results

📋 Test Status

Test Summary:

• Total: 49
• ✅ Passed: 48
• ❌ Failed: 0
• ⚠️ Errors: 0
• ⏭️ Skipped: 1

📈 Benchmark Results

📊 View detailed benchmark report

📦 Package Bundling Metrics

Package	Bundle Time	Bundle Size
httpx	243.8 ms	321.42 KB
idna	50.31 ms	245.81 KB
pyyaml	356.78 ms	237.84 KB
requests	151.8 ms	216.71 KB
rich	932.9 ms	951.26 KB

Benchmark metrics are tracked via Bencher.dev

📊 View detailed performance trends and comparisons on the Bencher dashboard.

_{Generated by ecosystem-tests workflow}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3776f8b07e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Keep the release version ahead of 0.8.5

When this release commit is merged after the parent state at 0.8.5, this downgrade makes the release workflows build and publish 0.8.0 again instead of the next version. Since the manifest, lockfile, npm package, and version.txt were all changed from 0.8.5 to 0.8.0, the tag/package publication will either be rejected as an already-used version or advertise an older release than the code it contains; the release metadata should advance past 0.8.5, not reset below it.

Useful? React with 👍 / 👎.

[Copilot]

Pull request overview

This PR appears to be an auto-generated Release Please “release” change intended to publish a new Cribo version by updating version markers across the Rust workspace, npm package, and changelog.

Changes:

• Updates project version in version.txt, Rust workspace metadata (Cargo.toml / Cargo.lock), and the npm package (npm/cribo/package.json).
• Prepends a new release section to CHANGELOG.md.
• Updates .release-please-manifest.json to the new release version.

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
version.txt	Updates the single-source version marker used across the repo.
npm/cribo/package.json	Updates npm package version and platform optional dependency versions.
CHANGELOG.md	Adds a new release entry at the top of the changelog.
Cargo.toml	Updates Rust workspace package version metadata.
Cargo.lock	Updates the lockfile’s cribo package version entry.
.release-please-manifest.json	Updates Release Please’s recorded current version.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Bencher Report

Branch	release-please--branches--main
Testbed	ubuntu-latest

Click to view all benchmark results

Benchmark	Latency	Benchmark Result nanoseconds (ns) (Result Δ%)	Upper Boundary nanoseconds (ns) (Limit %)
build_dependency_graph	📈 view plot 🚷 view threshold	729.76 ns (-90.79%) Baseline: 7,920.34 ns	13,018.24 ns (5.61%)
bundle_simple_project	📈 view plot 🚷 view threshold	730,830.00 ns (-87.83%) Baseline: 6,004,598.12 ns	25,934,677.17 ns (2.82%)
resolve_module_path	📈 view plot 🚷 view threshold	89.52 ns (-19.45%) Baseline: 111.13 ns	144.31 ns (62.03%)

🐰 View full continuous benchmarking report in Bencher