Skip to content

chore: release - #422

Merged
kixelated merged 1 commit into
mainfrom
release-plz-2026-11-06T23-22-35Z
Nov 6, 2026
Merged

kixelated merged 1 commit into
mainfrom
release-plz-2026-11-06T23-22-35Z

Conversation

@moq-bot

@moq-bot moq-bot Bot commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

🤖 New release

  • rind: 0.1.13 -> 0.2.0 (⚠ API breaking changes)
  • rind-jsonwebtoken: 0.1.13 -> 0.2.0 (✓ API compatible changes)
  • rind-rustls: 0.1.13 -> 0.2.0 (✓ API compatible changes)
  • rind-dimpl: 0.1.13 -> 0.2.0 (✓ API compatible changes)
  • rind-object-store: 0.1.13 -> 0.2.0 (✓ API compatible changes)
  • rind-ring: 0.1.12 -> 0.2.0 (✓ API compatible changes)
  • rind-rcgen: 0.1.13 -> 0.1.14

⚠ rind breaking changes

--- failure enum_missing: pub enum removed or renamed ---

Description:
A publicly-visible enum cannot be imported by its prior path. A `pub use` may have been removed, or the enum itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/enum_missing.ron

Failed in:
  enum rind::signature::RsaKeySize, previously in file /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/mid/rsa_key_size.rs:7

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/inherent_method_missing.ron

Failed in:
  EcdsaKeyPair::from_private_key_and_public_key, previously in file /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/high/signature.rs:683

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters, not counting the receiver (self) parameter.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/method_parameter_count_changed.ron

Failed in:
  rind::cipher::AesCtr::new takes 2 parameters in /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/mid/aes.rs:44, but now takes 3 parameters in /tmp/nix-shell.ILvbmA/.tmphBKC3z/rind/rind/src/mid/aes.rs:72
  rind::cipher::AesCtr::apply_keystream takes 3 parameters in /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/mid/aes.rs:60, but now takes 2 parameters in /tmp/nix-shell.ILvbmA/.tmphBKC3z/rind/rind/src/mid/aes.rs:91

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/struct_missing.ron

Failed in:
  struct rind::signature::Pkcs8, previously in file /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/high/signature.rs:307
  struct rind::signature::RsaPublicKeyComponents, previously in file /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/high/signature.rs:915
  struct rind::signature::Spki, previously in file /tmp/nix-shell.ILvbmA/.tmp05Cj4F/rind/src/high/signature.rs:329
Changelog

rind

0.2.0 - 2026-11-06

Added

  • (key_wrap) AES key wrap with padding (RFC 5649) (#418)
  • (rsa) load RSA keys named id-RSAES-OAEP or id-ea-rsa, as aws-lc-rs does (#413)
  • (rsa) RSA public keys export as SPKI (#411)
  • [breaking] audit rind's public API, and apply its decisions, before 0.2.0 (#383)
  • (keys) SPKI, SEC1, and seed key formats, and compressed ECDH peers, for Bun (#382)
  • (cipher) AES-CBC with PKCS#7 padding on every backend (#381)
  • (agreement) [breaking] store, load, and export agreement keys, agreeing by reference (#372)
  • (signature) ECDSA over a precomputed digest (#379)
  • (signature) RSA-PSS with any salt length (#363)
  • (key_wrap) AES key wrap (RFC 3394) on AES decryption for every backend (#359)
  • (rsa) RSA-OAEP encryption and decryption, and RSA SPKI public keys (#361)
  • (cipher) [breaking] AES-CTR over a 16-byte counter block with a per-key counter width (#360)
  • (aead) AES-GCM with any IV length and truncated tags (#362)
  • (digest) SHA3-256, SHA3-384, and SHA3-512 (#358)
  • (proofs) prove aarch64 P-256 ECDSA end to end with Aeneas and Lean (#346)

Fixed

  • (ctgrind) green the nightly again: PBKDF2's HMAC out of line, and DIT denied under valgrind (#406)
  • (bench-report) hold each host with quest gate --host, and measure macOS noise (#399)
  • (cpu) run aarch64 Linux with DIT where Hyper-V hides it (#370)
  • (cpu) run aarch64 Windows with DIT where the core has it (#366)
  • (x86_64) build on the declared 1.90 rust-version, and gate on it (#365)

Other

  • (digest) start and reset a Context from a constant (#416)
  • (readme) show how to use rind and link the details (#410)
  • (aarch64) seal and open short AES-GCM messages in one pass (#393)
  • (aes) header protection reads the sample straight into AES-NI (#392)
  • (readme) credit Vale's proven kernel for short AES-GCM on VAES CPUs (#402)
  • (aes-gcm) run Vale's kernel for short messages on VAES CPUs (#391)
  • stop wiping anything but keys, keyed state, and private-key heap scratch (#394)
  • (sha) pad SHA-1 and SHA-256's last block in registers on the SHA extensions (#376)
  • (ecdsa) build a verifying key's multiples on its first verification (P-256 keygen 1.4x) (#374)
  • a prompt has an agent migrate a repo to rind and report the results (#357)
  • (sha256) [breaking] finish SHA-NI hashes in registers, and digest contexts by reference (#352)
  • (build) test aarch64 Windows, x86_64 macOS, and musl (#356)

rind-jsonwebtoken

0.2.0 - 2026-11-06

Added

  • [breaking] audit rind's public API, and apply its decisions, before 0.2.0 (#383)

rind-rustls

0.2.0 - 2026-11-06

Added

  • [breaking] audit rind's public API, and apply its decisions, before 0.2.0 (#383)

Fixed

  • (adapters) [breaking] return each adapter's own MissingFeature, not rind's (#420)

Other

  • (sha256) [breaking] finish SHA-NI hashes in registers, and digest contexts by reference (#352)

rind-dimpl

0.2.0 - 2026-11-06

Fixed

  • (adapters) [breaking] return each adapter's own MissingFeature, not rind's (#420)

rind-object-store

0.2.0 - 2026-11-06

Fixed

  • (adapters) [breaking] return each adapter's own MissingFeature, not rind's (#420)

rind-ring

0.2.0 - 2026-11-06

Added

  • (rsa) load RSA keys named id-RSAES-OAEP or id-ea-rsa, as aws-lc-rs does (#413)
  • [breaking] audit rind's public API, and apply its decisions, before 0.2.0 (#383)
  • (rind-ring) re-export rind's CPU check as cpu (#377)

Fixed

  • (adapters) [breaking] return each adapter's own MissingFeature, not rind's (#420)

Other

  • (readme) show how to use rind and link the details (#410)
  • stop wiping anything but keys, keyed state, and private-key heap scratch (#394)
  • (sha256) [breaking] finish SHA-NI hashes in registers, and digest contexts by reference (#352)

rind-rcgen

0.1.14 - 2026-11-06

Other

  • updated the following local packages: rind


This PR was generated with release-plz.

@pullfrog

pullfrog Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

Your OpenCode Go account is out of credit. Top it up, then re-trigger Pullfrog.

OpenCode Go's response
provider error: Insufficient account funds

Top up OpenCode Go →

Pullfrog  | Rerun failed job ➔ | View workflow run | via Pullfrog | Using glm-5.3

@kixelated
kixelated added this pull request to the merge queue Nov 6, 2026

@kixelated kixelated left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated review by review (OpenAI)

Reviewed head: b853848

No actionable findings in this release diff. The seven published crate versions match their lockfile entries, the adapters' versioned rind dependencies consistently move to 0.2.0, and the unpublished workspace members remain path-compatible. rind-rcgen keeps rind types out of its public signatures, consistent with its patch-level release. The lockfile's additional patch updates are consistent with the enabled release-plz dependency-update setting.

Direction: no code changes requested from this inspection. This is a comment-only review, not merge or release approval.

Verification limits: GitHub-only static review of the 16 changed files and relevant workspace/API context. No build, tests, package/publish checks, or upstream dependency patch audits were run. Previously merged implementation changes described in the changelog were not re-reviewed. The returned workflow list contained only the expected skipped Queue run, with no commit statuses; this does not establish a passing build. Open/non-draft state, the exact head, and existing reviews were rechecked immediately before submission.

Merged via the queue into main with commit feddff1 Nov 6, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant