chore: release

[QaidVoid]

🤖 New release

• soar-utils: 0.4.2 -> 0.4.3 (✓ API compatible changes)
• soar-config: 0.10.0 -> 0.11.0 (⚠ API breaking changes)
• soar-registry: 0.5.0 -> 0.5.1 (✓ API compatible changes)
• soar-db: 0.5.4 -> 0.5.5 (✓ API compatible changes)
• soar-core: 0.16.3 -> 0.16.4 (✓ API compatible changes)
• soar-operations: 0.3.1 -> 0.3.2 (✓ API compatible changes)
• soar-cli: 0.12.6 -> 0.12.7
• soar-dl: 0.10.1 -> 0.10.2
• soar-package: 0.4.1 -> 0.4.2

⚠ soar-config breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.48.0/src/lints/enum_variant_added.ron

Failed in:
  variant ConfigError:RepositoryNotFound in /tmp/.tmpZOJn9M/soar/crates/soar-config/src/error.rs:68
  variant ConfigError:InvalidRepositoryName in /tmp/.tmpZOJn9M/soar/crates/soar-config/src/error.rs:80

--- failure enum_variant_missing: pub enum variant removed or renamed ---

Description:
A publicly-visible enum has at least one variant that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.48.0/src/lints/enum_variant_missing.ron

Failed in:
  variant ConfigError::InvalidRepository, previously in file /tmp/.tmpB27fFj/soar-config/src/error.rs:65

Changelog

soar-utils

0.4.3 - 2026-07-16

🐛 Bug Fixes

• (security) Validate repository names to block path traversal (#183) - (c4b34f9)

soar-config

0.11.0 - 2026-07-16

🐛 Bug Fixes

• (security) Validate repository names to block path traversal (#183) - (c4b34f9)

soar-registry

0.5.1 - 2026-07-16

⛰️ Features

• (metadata) Support local metadata source (#181) - (487850d)

soar-db

0.5.5 - 2026-07-16

🐛 Bug Fixes

• (security) Validate pkg_name and pkg_id as path components (#184) - (97a0f57)
• (security) Validate repository names to block path traversal (#183) - (c4b34f9)
• (security) Validate provides names to block path traversal (#182) - (034b085)

soar-core

0.16.4 - 2026-07-16

🐛 Bug Fixes

• (security) Validate pkg_name and pkg_id as path components (#184) - (97a0f57)
• (security) Validate provides names to block path traversal (#182) - (034b085)

soar-operations

0.3.2 - 2026-07-16

🐛 Bug Fixes

• (install) Resolve main binary from provides for checksum - (51da135)
• (security) Validate pkg_name and pkg_id as path components (#184) - (97a0f57)
• (security) Validate repository names to block path traversal (#183) - (c4b34f9)
• (security) Validate provides names to block path traversal (#182) - (034b085)

soar-cli

0.12.7 - 2026-07-16

⛰️ Features

• (metadata) Support local metadata source (#181) - (487850d)

🐛 Bug Fixes

• (install) Resolve main binary from provides for checksum - (51da135)
• (security) Validate repository names to block path traversal (#183) - (c4b34f9)
• (security) Validate pkg_name and pkg_id as path components (#184) - (97a0f57)
• (security) Validate provides names to block path traversal (#182) - (034b085)
• (self) Update atomacially to avoid bricking on failure (#180) - (c4afeb3)

soar-dl

0.10.2 - 2026-07-16

⚙️ Miscellaneous Tasks

• Updated the following local packages: soar-utils - (0000000)

soar-package

0.4.2 - 2026-07-16

⚙️ Miscellaneous Tasks

• Updated the following local packages: soar-utils, soar-config - (0000000)

---

This PR was generated with release-plz.

[cloudflare-workers-and-pages]

Deploying soar-docs with    Cloudflare Pages

Latest commit:	f1378da
Status:	✅  Deploy successful!
Preview URL:	https://27f12347.soar-docs.pages.dev
Branch Preview URL:	https://release-plz-2026-07-03t16-36.soar-docs.pages.dev

View logs

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

This PR bumps soar-operations to 0.3.2, soar-cli to 0.12.7, and soar-registry, soar-core, and soar-db to their next patch versions, while updating the matching workspace dependency and changelog entries.

Changes

Release version bump

Layer / File(s)	Summary
soar-operations version bump and changelog crates/soar-operations/Cargo.toml, crates/soar-operations/CHANGELOG.md	Version bumped from 0.3.1 to 0.3.2, with a changelog entry for the checksum/main-binary resolution fix.
Workspace dependency update Cargo.toml	Workspace dependency reference for soar-operations updated to version 0.3.2.
soar-cli version bump and top-level changelog crates/soar-cli/Cargo.toml, CHANGELOG.md	Version bumped from 0.12.6 to 0.12.7, with a top-level changelog entry for the release’s feature and bug-fix notes.
Registry, core, and db release updates crates/soar-registry/Cargo.toml, crates/soar-registry/CHANGELOG.md, crates/soar-core/Cargo.toml, crates/soar-core/CHANGELOG.md, crates/soar-db/Cargo.toml, crates/soar-db/CHANGELOG.md	soar-registry, soar-core, and soar-db each receive a patch version bump plus matching changelog entries for the local-package update notes.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• pkgforge/soar#178: Coordinated soar-operations release changes that update the same install-related behavior and versioning surface.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title is generic and doesn't describe the actual release bumps or feature/fix changes.	Use a more specific title like "release: bump soar-registry, soar-operations, soar-cli, soar-db, and soar-core".

✅ Passed checks (4 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-plz-2026-07-03T16-36-24Z

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}