C2PA Tool release notes

info

For additional release notes for versions 0.9.x and earlier, see Archived release notes.

Changelog

All changes to this project are documented in this file. For a high-level summary of changes, see the Release Notes.

This project adheres to Semantic Versioning, except that – as is typical in the Rust community – the minimum supported Rust version may be increased without a major version increase.

Since version 0.10.0, the format of this changelog is based on Keep a Changelog.

0.16.5

25 April 2025

Fixed

• Enable post_validate_async for WASI (#1052)

0.16.4

16 April 2025

Documented

• Remove instructions to install c2patool using binstall (#1038)

Fixed

• Dynamic assertions should be gathered assertions (#1005)

0.16.3

07 April 2025

Fixed

• Adjust dependencies to avoid security warnings and yanked versions (#1031)

0.16.2

04 April 2025

Fixed

• Update openssl to address a recently-announced vulnerability (#1024)

0.16.1

26 March 2025

• Update to latest c2pa-crypto crate

0.15.0

18 March 2025

Added

• Adds reader.post_validate method for CAWG validation support (#976)
• Add WASI to c2patool (#945)

Fixed

• Remove circular dependency between C2PA and CAWG crates (#982)

Updated dependencies

• Bump env_logger from 0.11.6 to 0.11.7 (#963)

0.13.3

11 February 2025

Fixed

• Trigger a release of c2patool to pick up latest c2pa-rs changes

0.13.1

31 January 2025

Fixed

• Trigger a release of c2patool to pick up latest c2pa-rs changes (#895)

0.13.0

29 January 2025

Added

• Claim v2 (#707)

0.12.0

22 January 2025

Added

• Change the definition of Signer.raw_signer() to return an Option defaulting to None (#869)

0.11.1

18 January 2025

Fixed

• Upload a distinct SBOM per platform (#856)

0.11.0

16 January 2025

Added

• Move COSE signing into c2pa_crypto crate (#807)

Documented

• Post move cleanup (#778)

Fixed

• Fix: Obscure glob error message for missing files

0.10.2

12 December 2024

Fixed

• No-op change to trigger new c2patool build
• Update makefile for c2patool's new location in c2pa-rs workspace

0.10.1

12 December 2024

Fixed

• No-op change to trigger new c2patool release

0.10.0

12 December 2024

Added

• Updates c2patool to use only the new Builder/Reader API (contentauth/c2patool#297)

Documented

• Update Contributing guide, misc minor edits (contentauth/c2patool#296)

Fixed

• Compile c2pa-crypto with cargo check (#768)

Other

• Move c2patool source code into c2pa-rs repo (#723)
• Move profile settings to workspace Cargo.toml
• Enlarged description of c2pa command-line behavior (contentauth/c2patool#285)

0.9.12

18 October 2024

• fix: Update c2pa-rs for RegionOfInterest support. (contentauth/c2patool#269)
• Fix broken link that was causing os site workflow to fail (contentauth/c2patool#266)
• Bump codecov/codecov-action from 3 to 4 (contentauth/c2patool#242)
• chore: Run all CI jobs when user is dependabot[bot]
• chore: Debug CI again
• chore: Format for consistency with c2pa-rs CI workflow (contentauth/c2patool#265)
• chore: Don't skip CI jobs for non-pull-request events
• chore: Retry debug
• chore: Debug action context
• chore: Skip CodeCov upload for non-member PRs (contentauth/c2patool#263)
• Bump EmbarkStudios/cargo-deny-action from 1 to 2 (contentauth/c2patool#245)
• chore: Adjust conditions for running CI jobs (contentauth/c2patool#261)

0.9.11

16 October 2024

• Merge hardening bug fixes (contentauth/c2patool#260)

0.9.10

07 October 2024

• Update c2ptool to use latest c2pa-rs (contentauth/c2patool#258)

0.9.9

17 September 2024

• Pull in latest bug fixes (contentauth/c2patool#237)
• Document fragment subcommand (contentauth/c2patool#236)
• Switch back to using pull_request instead of pull_request_target trigger
• Bump actions/checkout from 3 to 4 (contentauth/c2patool#243)
• Remove no-longer-maintained clippy-check action (contentauth/c2patool#238)

0.9.8

30 August 2024

• Initial fragment support (contentauth/c2patool#230)
• Add warning about accessing a private key directly (contentauth/c2patool#218)

0.9.7

15 August 2024

• Update to latest c2pa SDK (contentauth/c2patool#222)
• Remove rust toolchain version lock (contentauth/c2patool#221)
• Update security guidance to link to SECURITY.md (contentauth/c2patool#217)

0.9.6

30 July 2024

• Pull latest c2pa-rs bug fixes into c2patool (contentauth/c2patool#212)
• only run tests/clippy if labeled (contentauth/c2patool#205)
• Bump env_logger from 0.10.2 to 0.11.4 (contentauth/c2patool#204)
• Updates cargo packages and cargo.deny file. (contentauth/c2patool#200)

0.9.5

18 July 2024

• Update to lastest c2pa-rs (contentauth/c2patool#197)
• added security.md (contentauth/c2patool#196)

0.9.4

25 June 2024

• Update c2patool (contentauth/c2patool#190)
• Match c2pa-rs minimum toolchain version and test in CI (contentauth/c2patool#188)
• Document how to specify an icon (contentauth/c2patool#182)

0.9.3

29 May 2024

• Remove binary modules (contentauth/c2patool#179)

0.9.2

24 May 2024

• Remove integration tests for now due to extraneous binaries (contentauth/c2patool#178)

0.9.1

22 May 2024

• Add better support for cargo-binstall (contentauth/c2patool#177)

0.9.0

07 May 2024

• Integrate with c2pa-rs 0.32.0, various test case fixes. (contentauth/c2patool#175)
• Add HTTP source option for trust config (contentauth/c2patool#174)

0.8.2

28 March 2024

• fixed c2patool asset name (contentauth/c2patool#171)

0.8.1

25 March 2024

• use c2pa-rs 0.31.1 for actions.changes support (contentauth/c2patool#170)

0.8.0

20 March 2024

• allow clients to sign with a process outside of c2patool (contentauth/c2patool#169)
• Add trust and verification options to c2pa_tool (contentauth/c2patool#168)
• adds version to c2patool artifact names (contentauth/c2patool#158)

0.7.0

22 November 2023

• updates to c2pa-rs v0.28.2 (contentauth/c2patool#153)
• Update to c2pa-rs 0.28.1

0.6.2

05 October 2023

• update to c2pa 0.27.1 (contentauth/c2patool#146)
• Merge branch 'main' of https://github.com/contentauth/c2patool
• Add Do not train example
• Upgrade to c2pa-rs 0.26.0 (contentauth/c2patool#143)
• Fix issue with docusaurus styling and fix broken links (contentauth/c2patool#138)
• Updates to c2pa-rs 0.25.1 (contentauth/c2patool#128)
• Fix windows release (contentauth/c2patool#132)

0.6.1

24 July 2023

• use compress-archive instead of tar (contentauth/c2patool#130)

0.6.0

22 June 2023

• update to c2pa-rs 0.24.0 (contentauth/c2patool#127)

0.5.4

13 June 2023

• integrate c2pa 23.0 bump version (contentauth/c2patool#126)
• Merge branch 'main' of https://github.com/contentauth/c2patool
• c2pa-rs 23.0 + updated test
• Update README.md (contentauth/c2patool#124)

0.5.3

04 May 2023

• Parent Ingredient JSON (contentauth/c2patool#123)

0.5.2

19 April 2023

• Ingredient thumbnails, extension cleanup, toolkit update (contentauth/c2patool#120)

0.5.1

10 April 2023

• Update README.md (contentauth/c2patool#118)
• Update expired sample certs (contentauth/c2patool#113)

0.5.0

28 March 2023

• New ingredient support and c2pa file formats (contentauth/c2patool#111)
• Leverage new Manifest & Ingredient, add Ingredient creation. (contentauth/c2patool#107)

0.4.0

01 March 2023

• Add --certs and --tree options (contentauth/c2patool#106)
• update to cp2pa 0.17.0 (contentauth/c2patool#105)
• Update for Clippy in Rust 1.67 (contentauth/c2patool#101)

0.3.9

06 December 2022

• update to c2pa-rs 0.16.0
• allows clients to output manifest report to specified directory (contentauth/c2patool#91)

0.3.8

09 November 2022

• Bump c2pa from 0.13.2 to 0.15.0 (contentauth/c2patool#87)
• Build infrastructure improvements (contentauth/c2patool#85)
• Fix new Clippy warning in Rust 1.65 (contentauth/c2patool#84)
• Readme updates (contentauth/c2patool#62)

0.3.7

22 September 2022

• Treat a source asset with a manifest store as a default parent (contentauth/c2patool#76)
• Fetch remote manifests for --info (contentauth/c2patool#75)

0.3.6

16 September 2022

• Update Cargo.lock when publishing crate (contentauth/c2patool#71)
• [IGNORE] update readme --info (contentauth/c2patool#70)
• Update Cargo.lock to 0.3.5

0.3.5

15 September 2022

• Upgrade cpufeatures to non-yanked version (contentauth/c2patool#68)
• Add --info option (contentauth/c2patool#65)
• Updated publish workflow to upload binaries to GitHub (contentauth/c2patool#58)
• Fix Make release script & update readme (contentauth/c2patool#55)
• (Some version history omitted as we worked on some release process issues)

0.3.0

18 August 2022

• Rework c2patool parameters (contentauth/c2patool#53)
• Update to 0.11.0 c2pa-rs (contentauth/c2patool#38)
• Remove Homebrew, Git installation methods, and add "update" wording (contentauth/c2patool#33)

0.2.1

29 June 2022

• Add BMFF support for video & etc (contentauth/c2patool#25)

0.2.0

28 June 2022

• Upgrade to c2pa Rust SDK version 0.6.0 (contentauth/c2patool#24)
• Fix an error in the README documentation (contentauth/c2patool#23)
• Display help if there are no arguments on the command line (contentauth/c2patool#21)
• Bump anyhow from 1.0.57 to 1.0.58 (contentauth/c2patool#17)
• Updates examples to use ta_url instead of ta (contentauth/c2patool#15)

0.1.3

17 June 2022

• Update to latest c2pa Rust SDK (contentauth/c2patool#12)
• Add built-in default certs to make getting started easier (contentauth/c2patool#9)

0.1.2

10 June 2022

• Update crate's description field

0.1.1

10 June 2022

• Initial public release