Skip to content

chore(release): 0.37.13.dev2 with conformance-validation-v02 merged - #6

Merged
mstattma merged 9 commits into
feat/trusted-vsi-functionalfrom
release/0.37.13.dev2
Oct 15, 2026
Merged

mstattma merged 9 commits into
feat/trusted-vsi-functionalfrom
release/0.37.13.dev2

Conversation

@mstattma

Copy link
Copy Markdown
  • adb4a8b true merge of feat/conformance-validation-v02 (f55a1fb): conformance tests (validation time, checked crJSON incl. NULL-export error path, crJSON 2.4) and the installed-wheel pytest==8.4.1 fix (Linux + Windows).
  • 563e37b release prep castlabs-v0.37.13.dev2 on native castlabs/c2pa-rs afd6fffe (feat: merge conformance-validation-v02 into the 1.0.8 native line c2pa-rs#21: 1.0.8 line + conformance merge), Cargo.lock f7022b3e…, SDK 0.92.0-dev, Rust 1.96.0. castlabs-v0.37.13.dev1 (run 38786913569) was never published: installed-wheel jobs lacked pytest.
  • e87d3e3 review follow-up: validation-time tests gated to the Castlabs source build; strict_trust_purposes documented as accepted-and-ignored.

Real native (3a20840d… from afd6fffe), cbor2 5.9 and 6.1.2, no skips: unit 507, conformance 4, fragmented 14, fragment-offset 65, trusted VSI 207, ladder 49, ownership 16, release smoke 5. Independent review: P2/P3 fixed.

Pin native castlabs/c2pa-rs a2739fd6 (VSI + contentauth main 6c92bc32 +
fMP4/TFRA fixes + validation time/trust purposes), Rust 1.96.0, and
release from feat/conformance-validation-v02.
…l tests

Install pytest explicitly in the installed-wheel test environments and
pin native castlabs/c2pa-rs 6ca7fb16.
….8 line

Merge origin/feat/conformance-validation-v02 (f55a1fb) to pair with the
native castlabs/c2pa-rs conformance merge (PR contentauth#21).

Resolution:
- Release identity, pins and tooling stay on this line (0.37.13.* on
  feat/trusted-vsi-functional, trusted VSI API, fragment-offset binding and
  smoke); the conformance line's 0.37.12.dev1-dev4 release-prep pins are
  dropped.
- Take the conformance line's genuine changes: contentauth main 0.37.12
  merge content (already present here), 53ed862 native validation time and
  checked crJSON tests and fixture fixes, and the installed-wheel pytest
  install fix (Linux and Windows) with a tooling regression assertion.
- Reader.crjson() documents the checked native export; add tests that a
  NULL return raises (with and without a native error message).
- Move TestConformanceValidationSettings above the __main__ guard.
- Keep both lines' release notes history.
Pin native castlabs/c2pa-rs afd6fffe5a066e0b5b1a14f3f8c7ac189e7f0c95 (the
1.0.8 trusted VSI native line merged with the conformance line; workspace
0.92.0-dev, Cargo.lock SHA-256 f7022b3e..., Rust 1.96.0) and release
0.37.13.dev2 from feat/trusted-vsi-functional as castlabs-v0.37.13.dev2.

castlabs-v0.37.13.dev1 (run 38786913569) was not published: its
installed-wheel test jobs lacked pytest. The paired qualification uses the
same native commit; functional build identities dev1 and older are rejected.
The upstream prebuilt library used by build.yml has no verify.validation_time
or crJSON 2.4. Document that strict_trust_purposes is accepted and ignored.
@mstattma
mstattma merged commit 4667070 into feat/trusted-vsi-functional Oct 15, 2026
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant