chore: release v0.29.0-dev

[caiopensrc]

🤖 New release

• c2patool: 0.28.0 -> 0.29.0-dev

Changelog

0.29.0-dev

25 September 2026

Added

• Enable Dependabot version updates, excluding c2pa (#317)
• Open an immediate PR on stable when c2pa-rs publishes a release (#316)
• Restore full release infrastructure for stable + release-process.md (#310)
• Auto-track c2pa-rs's main branch (#309)
• [breaking] Update for C2PA 2.3 spec (feat!: Update for C2PA 2.3 spec c2pa-rs#2545)

Documented

• (cli) Document --trust_list_uri and init trust subcommand (#303)
• Add support-tiers.md for c2patool (#313)
• Add CI, crates.io, and codecov badges to README (#312)
• Fix dangling contentauth/c2pa-rs links (#307)
• Remove duplicate info, general edits, fix links, etc. (docs: Remove duplicate info, general edits, fix links, etc. c2pa-rs#2490)
• Edit and cleanup pass (docs: Edit and cleanup pass c2pa-rs#2354)
• Add experimental features policy (docs: Add experimental features policy c2pa-rs#2345)

Fixed

• Report failed fragments rather than dropping them (#336)
• Don't fail promote.yml when the RC version was never bumped (#347)
• Use CROSS_ORG_PR_TOKEN for release-rc.yml workflow dispatch (#327)
• Bump MSRV to 1.96.0 and fix release-binary paths (#326)
• Update release workflow for the standalone repo's bare v* tag scheme
• [breaking] C2PA 2.4 validation (fix!: C2PA 2.4 validation c2pa-rs#2578)
• Run Tier 1A on all PRs regardless of target branch (fix: run Tier 1A on all PRs regardless of target branch c2pa-rs#2574)
• Consistently use xmp.iid: instead of xmp:iid: (fix: consistently use xmp.iid: instead of xmp:iid: c2pa-rs#2563)
• Correct tag, commit, and changelog for tag-driven binary releases (fix: Correct tag, commit, and changelog for tag-driven binary releases c2pa-rs#2306)

Other

• Skip atomic write replacement test on WASI (#343)
• Strengthen trust sidecar anchor assertion (#339)
• Add promote.yml workflow for release-candidate promotion (#338)
• Version-control GitHub labels via labels.yml (#311)
• Add commit-lint enforcement for PR titles (#315)
• Restore full CI job set for the standalone repo (#308)
• Replace safe to test trust logic with GitHub native fork-approval (ci: Replace safe to test trust logic with GitHub native fork-approval c2pa-rs#2420)
• Trust same-repo PR branches instead of author_association (ci: Trust same-repo PR branches instead of author_association c2pa-rs#2352)
• Publish binaries for each release-candidate build (ci: Publish binaries for each release-candidate build c2pa-rs#2304)

Updated dependencies

• Bump mockall from 0.14.0 to 0.15.0 (update: bump mockall from 0.14.0 to 0.15.0 c2pa-rs#2593)
• Bump pem from 3.0.6 to 4.0.0 (update: bump pem from 3.0.6 to 4.0.0 c2pa-rs#2496)

---

This PR was generated with release-plz.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 76.42%. Comparing base (df0e309) to head (7f0f2c5).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #349   +/-   ##
=======================================
  Coverage   76.42%   76.42%           
=======================================
  Files           4        4           
  Lines        1073     1073           
=======================================
  Hits          820      820           
  Misses        253      253           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[scouten-adobe]

Not the right release PR. Will investigate.

[scouten-adobe]

Incorrect PR. Revising the CI infrastructure then will re-issue.