chore(main): release 0.19.0

[cachekit-release-bot]

🤖 I have created a release beep boop

0.19.0 (2026-09-14)

Features

• backend: bound L1 backfill by the server's remaining freshness (LAB-557) (#268) (7bd5abf)
• concurrency: free-threaded CPython support — memory-ordering fixes, gil_used=false, CI lane (LAB-511) (#265) (bda770b)

Bug Fixes

• ci: fail loudly on attestation lookup failure; decide the codecov pair (LAB-2528) (#270) (2a8b941)
• file: guard eviction unlink against a concurrent rename (LAB-2685) (#285) (e917a57)
• file: write every byte or fail; evict a payload that shrank under read (LAB-2682) (#272) (068adb2)
• redis: stop lock waiters pinning executor threads (LAB-3596) (#290) (ddbeb91)
• serializers: bound forged-entry error echoes; retire columnar dead code (LAB-3131) (#289) (10a1049)
• serializers: bound untrusted msgpack decode depth and header allocation (LAB-2503) (#276) (f7c087d)

---

This PR was generated with Release Please. See documentation.

Release 0.19.0

This is an automated release PR that bumps the project version from 0.18.0 to 0.19.0 across the codebase.

Version Updates

• rust/Cargo.toml: 0.18.0 → 0.19.0
• src/cachekit/__init__.py: __version__ updated to 0.19.0
• CHANGELOG.md: New release section added with changelog entries

What's Included in 0.19.0

Features

• backend: Bound L1 backfill by the server's remaining freshness (LAB-557)
• concurrency: Free-threaded CPython support — memory-ordering fixes, gil_used=false, and a dedicated CI lane (LAB-511)

Bug Fixes

• ci: Fail loudly on attestation lookup failure; decide the codecov pair (LAB-2528)
• file: Guard eviction unlink against a concurrent rename (LAB-2685)
• file: Write every byte or fail; evict a payload that shrank under read (LAB-2682)
• redis: Stop lock waiters from pinning executor threads (LAB-3596)
• serializers: Bound forged-entry error echoes; retire columnar dead code (LAB-3131)
• serializers: Bound untrusted msgpack decode depth and header allocation (LAB-2503)

This PR was generated automatically by release-please.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 19beaf7a-2853-4037-babd-682702d81e36

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[kodus-27b]

Kody Review Complete

Great news! 🎉
No issues were found that match your current review configurations.

Keep up the excellent work! 🚀

Kody Guide: Usage and Configuration

Interacting with Kody

• Request a Review: Ask Kody to review your PR manually by adding a comment with the @kody start-review command at the root of your PR.

• Validate Business Logic: Ask Kody to validate your code against business rules by adding a comment with the @kody -v business-logic command.

• Provide Feedback: Help Kody learn and improve by reacting to its comments with a 👍 for helpful suggestions or a 👎 if improvements are needed.

Current Kody Configuration

Review Options

The following review options are enabled or disabled:

Options	Enabled
Bug	✅
Performance	✅
Security	✅
Business Logic	✅

Access your configuration settings here.

​