chore: release v3.5.5

[mise-en-dev]

🐛 Bug Fixes

• (parse) allow hyphen-prefixed flag values by @jdx in #715

📚 Documentation

• redesign logo as flat vector flag mark by @jdx in #714

🧪 Testing

• invoke typescript compiler through npx package by @jdx in #719

🔍 Other Changes

• (release) skip ai reviews for release prs by @jdx in #718
• schedule releases for Monday morning by @jdx in #710
• gate autorelease on fix and feat commits by @jdx in #716

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (2)

• chore: release
• chore(main): release

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 4dea232a-2503-4027-8504-9f0c3b7e771e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

📝 Walkthrough

Walkthrough

This PR bumps the project version from 3.5.4 to 3.5.5 across Cargo manifests, CLI metadata, generated documentation, and adds a new CHANGELOG.md entry dated 2026-07-07.

Changes

Release version bump

Layer / File(s)	Summary
Version bump across manifests and metadata Cargo.toml, cli/Cargo.toml, lib/Cargo.toml, cli/usage.usage.kdl	Version fields for the workspace dependency, CLI package, library package, and generated CLI metadata were updated from 3.5.4 to 3.5.5.
Generated docs and changelog docs/cli/reference/commands.json, docs/cli/reference/index.md, CHANGELOG.md	CLI reference docs were updated to 3.5.5, and CHANGELOG.md adds a new v3.5.5 entry with bug-fix, documentation, and release-scheduling notes.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• jdx/usage#658: Same version-bump pattern touching manifest, CLI, and documentation files.
• jdx/usage#688: Same coordinated release update across manifests, CLI metadata, docs, and changelog.
• jdx/usage#690: Same release update pattern for versioned files and changelog entry.

Poem

A hop, a skip, a version twirl,
3.5.5 now gives a whirl. 🐇
Docs and manifests dance in line,
Monday morning, release-time shine.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes this release PR and the version bump to v3.5.5.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Greptile Summary

This is a routine release PR bumping the project to v3.5.5, covering a parse bug fix (hyphen-prefixed flag values), a logo redesign, a TypeScript compiler test improvement, and several release-automation changes.

• Version bumps: usage-lib and usage-cli updated from 3.5.4 → 3.5.5 across Cargo.toml, Cargo.lock, and all generated/doc files.
• Dependency updates: Routine patch bumps to cc, jiff, memchr, regex, zerocopy, and others in Cargo.lock; eslint bumped from 10.6.0 → 10.7.0 in package.json and aube-lock.yaml.

Confidence Score: 5/5

Safe to merge — purely mechanical version bumps with no logic changes.

All changes are version number updates, lockfile refreshes, and generated/doc file synchronization. No application logic, APIs, or behavior is modified.

No files require special attention.

Important Files Changed

Filename	Overview
CHANGELOG.md	Adds v3.5.5 release entry with bug fix, docs, testing, and other changes.
Cargo.lock	Bumps several dependency checksums (cc, jiff, memchr, regex, rustc-demangle, tinyvec, zerocopy, zmij) and updates usage-cli/usage-lib to v3.5.5.
Cargo.toml	Updates usage-lib workspace dependency version from 3.5.4 to 3.5.5.
aube-lock.yaml	Bumps eslint peer dependency from 10.6.0 to 10.7.0 throughout the lockfile snapshots.
cli/Cargo.toml	Bumps usage-cli package version from 3.5.4 to 3.5.5.
lib/Cargo.toml	Bumps usage-lib package version from 3.5.4 to 3.5.5.
package.json	Bumps eslint dependency specifier from ^10.6.0 to ^10.7.0.
cli/usage.usage.kdl	Updates generated CLI spec version from 3.5.4 to 3.5.5.
docs/cli/reference/commands.json	Updates version field in generated CLI reference JSON from 3.5.4 to 3.5.5.
docs/cli/reference/index.md	Updates version reference in CLI documentation from 3.5.4 to 3.5.5.

_{Reviews (6): Last reviewed commit: "chore: release v3.5.5" | Re-trigger Greptile}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/​regex@​1.12.4 ⏵ 1.13.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: cargo zerocopy is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → cargo/criterion@0.8.2 → cargo/zerocopy@0.8.54 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore cargo/zerocopy@0.8.54. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report