chore(main): release cachekit 0.1.6

[cachekit-release-bot]

🤖 I have created a release beep boop

0.1.6 (2026-09-16)

Features

• encryption: previousMasterKeys keyring rotation surface (LAB-685) (#103) (e7d1a8f)

Bug Fixes

• cachekitio: reject reserved cache-key segments in request path (CWE-22, LAB-2877) (#118) (c93083b)
• cachekitio: send X-CacheKit-TTL and reject invalid TTLs per protocol spec (LAB-239) (#110) (0862629)
• interop: fire map/object collection cap before key materialisation (LAB-413) (#113) (403b1b3)
• L1 TTL cap, loud size rejections, Cache API compression default, Node-free workers types (LAB-1388) (#98) (13a3345)
• security: store ciphertext in L1 for encrypted caches (LAB-238) (#104) (0b1b2f8)
• serialization: bound msgpack decode at all untrusted call sites (LAB-281) (#111) (19ad90c)
• serialization: bound msgpack decode nesting depth before allocation (LAB-2487) (#112) (906942d)

---

This PR was generated with Release Please. See documentation.

Release cachekit 0.1.6

This is an automated release PR generated by release-please for the cachekit package, bumping the version from 0.1.5 to 0.1.6.

Changelog Updates

The PR updates packages/cachekit/CHANGELOG.md to document the following changes included in this release:

Features

• encryption: Added previousMasterKeys keyring rotation surface (LAB-685, feat(encryption): previousMasterKeys keyring rotation surface (LAB-685) #103)

Bug Fixes

• cachekitio: Reject reserved cache-key segments in request paths to prevent path traversal (CWE-22, LAB-2877, fix(cachekitio): reject reserved cache-key segments in request path (CWE-22, LAB-2877) #118)
• cachekitio: Send X-CacheKit-TTL header and reject invalid TTLs per protocol spec (LAB-239, fix(cachekitio): send X-CacheKit-TTL and reject invalid TTLs per protocol spec (LAB-239) #110)
• interop: Enforce map/object collection cap before key materialisation (LAB-413, fix(interop): fire map/object collection cap before key materialisation (LAB-413) #113)
• Added L1 TTL cap, loud size rejections, Cache API compression default, and Node-free workers types (LAB-1388, fix: L1 TTL cap, loud size rejections, Cache API compression default, Node-free workers types (LAB-1388) #98)
• security: Store ciphertext in L1 for encrypted caches (LAB-238, fix(security): store ciphertext in L1 for encrypted caches (LAB-238) #104)
• serialization: Bound msgpack decode at all untrusted call sites (LAB-281, fix(serialization): bound msgpack decode at all untrusted call sites (LAB-281) #111)
• serialization: Bound msgpack decode nesting depth before allocation (LAB-2487, fix(serialization): bound msgpack decode nesting depth before allocation (LAB-2487) #112)

Purpose

The changes in this release focus primarily on security hardening (path traversal prevention, encrypted L1 storage, msgpack decode bounds), protocol compliance for TTL handling, and adding key rotation capabilities. Once merged, this PR will publish the 0.1.6 version of the package.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: fd9dccae-2788-410e-8d00-0331c5ace5f3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[kodus-27b]

Kody Review Complete

Great news! 🎉
No issues were found that match your current review configurations.

Keep up the excellent work! 🚀

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​