chore: release prep for v3.5.0-rc.3

Folds the rc.2 publish-fix fallout:
- alef 0.19.5 regen fixes Kotlin Android trait-bridge codegen (was
  emitting HtmlToMarkdownRsBridge in the wrong file → publish
  :compileReleaseKotlin "Unresolved reference" failure)
- actions v1.6.6 fixes elixir Cargo.lock missing on real-release
- actions v1.6.7 fixes homebrew arm64_linux SIGPIPE
- new publish-pubdev.yaml splits Dart publish onto workflow_dispatch
  so pub.dev OIDC accepts the token (release event was rejected)
- pinned erlef/setup-beam@v1.24.0

Author: Goldziher

.github/workflows/ci-e2e.yaml

@@ -1016,7 +1016,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Setup Elixir
-        uses: erlef/setup-beam@v1.24
+        uses: erlef/setup-beam@v1.24.0
         with:
           elixir-version: "1.19"
           otp-version: "28.1"

CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.5.0-rc.3] - 2026-05-25
+
+### Fixed
+
+- **ci(actions/build-elixir-hex): generate `Cargo.lock` unconditionally after `rewrite-native-deps`.** The fallback `cargo generate-lockfile` only ran on dry-run, but the lockfile is gitignored — real-release runs hit `Missing files: native/html_to_markdown_nif/Cargo.lock` at `mix hex.build`. Now runs in both modes. (kreuzberg-dev/actions v1.6.6, floating `v1` retagged.)
+
+- **ci(publish): split Dart pub.dev publishing into a workflow_dispatch flow so OIDC trusted publishing succeeds.** pub.dev's OIDC verifier rejects tokens minted by `release` events (`Authentication failed!`) and only accepts `push` / `workflow_dispatch`. The publish workflow now assembles the Dart package as an artifact under the `release`-triggered run, then dispatches a separate `publish-pubdev.yaml` workflow (`workflow_dispatch`) that downloads the artifact and runs `dart-lang/publish-pub@v1`. The dispatched job inherits a token GitHub's OIDC provider mints with `event_name == workflow_dispatch`, which pub.dev's audit accepts.
+
+- **ci(actions/homebrew-build-bottles): suppress `brew config` SIGPIPE under `pipefail` on arm64 Linux runners.** The arm64 runner's `/usr/bin/ldd` writes more output than `head -20` consumes; under `set -o pipefail` the broken-pipe propagated out of the early diagnostic block and aborted the script before any bottle work. Temporarily disables `pipefail` for the diagnostic stanza only — strict mode is restored before the build phase. (kreuzberg-dev/actions v1.6.7, floating `v1` retagged.)
+
+- **bindings: regenerated with alef 0.19.5.** Picks up the Kotlin Android trait-bridge codegen fixes that caused the v3.5.0-rc.2 `:compileReleaseKotlin` failure (`Unresolved reference 'HtmlToMarkdownRsBridge'`): `bridge_obj` filename is now used for trait-bridge codegen so the file matches the object name; trait-bridge emission is skipped when the bridge function is excluded via `kotlin_android.exclude_functions`. Also picks up the alef 0.19.5 cumulative sweep: WASM emitter JSON-deserializes structured sub-config fields; swift-bridge restores JSON deserialization step in pre-call AHashMap binding; alef-emitter removes stray `>` after `.collect::<Vec<Vec<String>>>()`; PHP/Ruby/Elixir/Swift/Dart bridges emit pre-call `AHashMap` binding + `ahash = "0.8"` scaffold dep for `Cow<'static, str>` key map params; WASM wraps sanitized `Vec<Vec<String>>` fields with `serde_wasm_bindgen::to_value()`; WASM deduplicates input DTO struct generation across functions sharing the same config type; FFI preserves `AHashMap<Cow<'static, str>, _>` param types across the wrapper boundary; setup-defaults-ruby appends `--add-checksums` to default `bundle install`; scaffold-ffi injects workspace version into every internal workspace dependency so `cargo publish` accepts the FFI crate.
+
+- **ci(e2e): pin `erlef/setup-beam@v1.24.0`** (was `@v1.24` floating minor) to avoid silent action upgrades during the rc cycle.
+
+- **release: cut v3.5.0-rc.3.** Aligned every workspace manifest on `3.5.0-rc.3` via `alef sync-versions --set 3.5.0-rc.3` + full `alef generate` regen against alef 0.19.5.
+
 ## [3.5.0-rc.2] - 2026-05-25
 
 ### Changed

CITATION.cff

@@ -12,5 +12,5 @@ authors:
 repository-code: "https://github.com/kreuzberg-dev/html-to-markdown"
 url: "https://kreuzberg.dev"
 license: MIT
-version: 3.5.0-rc.2
+version: 3.5.0-rc.3
 date-released: 2026-05-17

Cargo.toml

@@ -23,7 +23,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "3.5.0-rc.2"
+version = "3.5.0-rc.3"
 edition = "2024"
 authors = ["Na'aman Hirschfeld <naaman@kreuzberg.dev>"]
 description = "High-performance HTML to Markdown converter"
@@ -44,7 +44,7 @@ clap_complete = "4.6"
 clap_mangen = "0.3"
 encoding_rs = "0.8"
 ext-php-rs = "0.15.13"
-html-to-markdown-rs = { version = "3.5.0-rc.2", path = "crates/html-to-markdown" }
+html-to-markdown-rs = { version = "3.5.0-rc.3", path = "crates/html-to-markdown" }
 html5ever = "0.39.0"
 once_cell = "1.21"
 pyo3 = { version = "0.28.3", features = ["abi3-py310"] }

alef.toml

@@ -1,5 +1,5 @@
 [workspace]
-alef_version = "0.19.4"
+alef_version = "0.19.5"
 languages = [
   "python",
   "node",

crates/html-to-markdown-ffi/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "html-to-markdown-ffi"
-version = "3.5.0-rc.2"
+version = "3.5.0-rc.3"
 edition = "2021"
 license = "MIT"
 description = "High-performance HTML to Markdown converter"
@@ -9,28 +9,29 @@ keywords = ["html", "markdown", "converter"]
 categories = ["text-processing"]
 repository = "https://github.com/kreuzberg-dev/html-to-markdown"
 
-# `serde_json` and `tokio` are emitted unconditionally above so the manifest
-# is stable across regens (and so the C FFI codegen can pull them in when an
-# async / Result-typed function appears in the API surface), but for umbrella
-# crates with no async fns and no JSON-marshalled return types they are
-# genuinely unused. The conditional `async-trait` / `futures-util` deps are
-# similarly flagged when the umbrella has trait-bridge / streaming adapters
-# configured but no actual async-trait / async-stream callsite in the
-# generated FFI shim.
-[package.metadata.cargo-machete]
-ignored = ["serde_json", "tokio", "async-trait"]
-
 [lib]
 crate-type = ["cdylib", "staticlib"]
 
-[features]
-default = []
-
 [dependencies]
-async-trait = "0.1"
-html-to-markdown-rs = { path = "../html-to-markdown", version = "3.5.0-rc.2", features = ["full", "metadata", "visitor", "serde", "inline-images"] }
+html-to-markdown-rs = { path = "../html-to-markdown", version = "3.5.0-rc.3", features = ["full", "metadata", "visitor", "serde", "inline-images"] }
+ahash = "0.8"
 serde_json = "1"
 tokio = { version = "1", features = ["full"] }
+async-trait = "0.1"
+
+# `serde_json`, `ahash`, and `tokio` are emitted unconditionally above so the
+# manifest is stable across regens (and so the C FFI codegen can pull them in
+# when an async / Result-typed function appears in the API surface), but for
+# umbrella crates with no async fns and no JSON-marshalled return types they
+# are genuinely unused. The conditional `async-trait` / `futures-util` deps
+# are similarly flagged when the umbrella has trait-bridge / streaming adapters
+# configured but no actual async-trait / async-stream callsite in the generated
+# FFI shim.
+[package.metadata.cargo-machete]
+ignored = ["ahash", "serde_json", "tokio", "async-trait"]
+
+[features]
+default = []
 
 [build-dependencies]
 cbindgen = "0.29"