Bump the crates to 0.5.0

[aterga]

Summary

The v0.5.0 tag was pushed at 62fee9c while every manifest still said 0.4.0, so the publish workflow's first check refused it (run 35918795624: tag v0.5.0 does not match imcp2-core's Cargo.toml version 0.4.0). This bumps imcp2, imcp2-core and imcp2-local to 0.5.0 — in lockstep, as 0.4.0 was — the workspace dependency on imcp2-core with them, and the three lines in Cargo.lock. It is the release that carries Client ID Metadata Documents (#191) and the on-host /metrics assertion (#198).

After merge the tag has to move. The workflow also requires the tagged commit to be on main, and the existing tag points at a commit without this bump, so it must be deleted and re-created on the merge commit; the push of the new tag re-triggers "Publish crate":

git tag -d v0.5.0
git push origin :refs/tags/v0.5.0
git tag v0.5.0 <merge commit of this PR>
git push origin v0.5.0

imcp2-local's dist release listens on its own imcp2-local-v* tag namespace, so its bump here publishes nothing by itself.

Related issues

Follows #191 and #198.

Changes

• Cargo.toml — imcp2 to 0.5.0; the workspace dependency imcp2-core to 0.5.0.
• crates/imcp2-core/Cargo.toml, crates/imcp2-local/Cargo.toml — 0.5.0.
• Cargo.lock — the three workspace entries, via cargo update -w; no other dependency moves.

Testing

• cargo build --locked --workspace --all-targets
• cargo test --locked --workspace --all-targets — 297 tests, 0 failures
• cargo publish --locked --dry-run --workspace — the workflow's Package step: both crates package and verify. One pre-existing warning it prints: chacha20 v0.10.0 in Cargo.lock is yanked on crates.io. Unrelated to this change and not fatal to publishing, but worth a cargo update -p chacha20 in a follow-up.
• cargo metadata reports 0.5.0 for imcp2-core and imcp2, the check the failed job ran
• .github/scripts/scan-internal-identifiers.sh origin/main...HEAD — clean
• cargo fmt / cargo clippy: no Rust source changed. npm test: the dashboard is unchanged.

Checklist

• I have read the Contributing guidelines.
• Docs (README / comments) updated for any user-visible change.
• No secrets, credentials, or internal-only information are included.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xd7VT72Qt16qiAJynu9EKj

---

Generated by Claude Code

[Copilot]

Copilot review overview

🟢 Approval recommended

All workspace manifests, dependency pins, and lockfile entries are consistently updated.

Review effort: Balanced
Findings: None

What changed in this PR

Updates all workspace crates to the 0.5.0 release version.

Changes:

• Bumps imcp2, imcp2-core, and imcp2-local to 0.5.0.
• Aligns the workspace dependency and lockfile entries.

File	Description
Cargo.toml	Updates the main crate and core dependency versions.
crates/​imcp2-core/​Cargo.toml	Bumps imcp2-core to 0.5.0.
crates/​imcp2-local/​Cargo.toml	Bumps imcp2-local to 0.5.0.
Cargo.lock	Synchronizes workspace package versions.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.