Skip to content

Bump c2pa from 0.88.0 to 0.90.22 - #410

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/c2pa-0.90.22
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/c2pa-0.90.22

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps c2pa from 0.88.0 to 0.90.22.

Changelog

Sourced from c2pa's changelog.

0.90.22

10 September 2026

Fixed

  • Normalize path URIs on collection hash (backport #2605) (#2625)

0.90.21

09 September 2026

Fixed

  • Identity assertion validation uses the caller's cawg_trust settings (stable backport, #2599) (#2604)

0.90.20

04 September 2026

Added

  • Add ZIP support (+ EPUB, Office Open XML, Open Document, and OpenXPS) and Collection Data Hash assertion (backport #499) (#2596)

0.90.19

04 September 2026

Fixed

  • Handling ingredient manifest label collisions (spec v2.4, 18.16.12) (backport #2585) (#2595)

0.90.18

04 September 2026

Fixed

  • Harden against invalid labels as CAWG identity hard bindings (backport #2538) (#2581)

0.90.17

03 September 2026

Fixed

  • Merge vulnerability fixes (#2579)
  • Do not log::error! validation error when hashed URI is dangling, instead log::debug! (backport #2555) (#2565)

0.90.16

27 August 2026

Added

  • Add Error::AssertionEncoding error source to error message (backport #2544) (#2549)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Sep 18, 2026
@puhley

puhley commented Sep 22, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps [c2pa](https://github.com/contentauth/c2pa-rs) from 0.88.0 to 0.90.22.
- [Release notes](https://github.com/contentauth/c2pa-rs/releases)
- [Changelog](https://github.com/contentauth/c2pa-rs/blob/c2pa-v0.90.22/CHANGELOG.md)
- [Commits](contentauth/c2pa-rs@c2pa-v0.88.0...c2pa-v0.90.22)

---
updated-dependencies:
- dependency-name: c2pa
  dependency-version: 0.90.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/c2pa-0.90.22 branch from 29915fe to b034a60 Compare September 22, 2026 21:43
@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #414.

@dependabot dependabot Bot closed this Oct 1, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/c2pa-0.90.22 branch October 1, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant