[moq-bot]

🤖 New release

• rind: 0.3.2 -> 0.4.0 (✓ API compatible changes)
• rind-aws-lc-rs: 1.0.2 -> 1.0.3
• rind-jsonwebtoken: 11.0.3 -> 11.0.4
• rind-rustls: 0.23.3 -> 0.23.4
• rind-dimpl: 0.9.3 -> 0.9.4
• rind-object-store: 0.14.3 -> 0.14.4
• rind-rcgen: 0.14.3 -> 0.14.4
• rind-ring: 0.17.3 -> 0.17.4
• rind-str0m: 0.25.2 -> 0.25.3
• rind-python: 0.1.2 -> 0.2.0

Changelog

rind

0.4.0 - 2026-11-12

Added

• (release) publish pyrind-cryptography to PyPI (#618)
• HPKE (RFC 9180), and rind-rustls's HPKE suites for ECH (#585)
• (ct-vartime) scan every architecture rind builds for (#586)
• (test) an ABI harness checks every assembly routine (#564)
• (proofs) HKDF's From key conversions are proven (#584)
• (python) pyrind-cryptography, pyca's hazmat API on pyrind (#553)
• (prove) check imported assembly is the object code its proofs check (#551)
• (agreement) [breaking] keys keep their public key and algorithm (#529)
• (cipher) [breaking] AES-CBC encryption takes a typed CbcIv (#530)
• test rind on big-endian s390x under qemu (#528)
• (hkdf) Prk::from(okm) chains one expand into the next (#531)

Fixed

• (oaep) leave DecryptingKey no unwiped padding on 32-bit (#617)
• (ctgrind) pass the nightly on main (#607)
• the build nightly passes on main (#600)
• (test) call the unsafe zero_bytes through call!'s unsafe arm (#593)
• (low) safe assembly wrappers enforce their preconditions in release builds (#583)
• repair nightly checks and ARM AES key wiping (#513)
• (release) return rind to 0.3.2 and set four adapter patch versions by hand (#548)
• (md5) restore WebAssembly builds (#543)
• (rustls) [breaking] rind-rustls is rustls's aws-lc-rs provider, item for item (#521)

Other

• (portable) bitslice AES several blocks a pass with aws-lc's aes_nohw (#621)
• Mutation testing on armv7 (#538)
• (aes) cut per-block and per-call cost from AES-KW and AES-CBC (#612)
• ML-DSA-44, ML-DSA-65, and ML-DSA-87 (#610)
• rind's tests run on wasm32 (#601)
• (portable) AES-GCM keeps its expanded key and seals in place (#613)
• (mutants) kill the surviving mutants that need crafted inputs (#603)
• BINSEC checks the secret paths no proof covers (#576)
• The hash and KDF glue's constant-time compares are proven (#582)
• run NIST's ACVP sample vectors (#555)
• (mutants) mutate the AVX-512 paths under Intel SDE (#570)
• fail on key-derived heap scratch freed unwiped (#581)
• (mutants) mutation test DIT on macOS arm64 (#578)
• aarch64 SHA-256 on the SHA-2 instructions is proven (#552)
• A constant-time check on every tier (#536)
• guard pages catch assembly that reads or writes past a buffer (#568)
• rind on 32-bit x86 (#524)
• (zeroing) check every byte of every secret type on every tier and Windows (#550)
• rind on PowerPC (#554)
• Key types wipe their whole value (#565)
• run the portable backend's tests under Miri nightly (#569)
• (low) edge-limb and aws-lc vector tests for the unproven bignum assembly (#567)
• rind on armv6 (#525)
• rind on riscv64 (#526)
• (ecdsa) check a loaded P-256 key's point without an inversion on x86_64 (#544)
• document the API audit's misuse hazards, and hide tag bytes from Debug (#532)
• use the rind wordmark in the README (#539)
• DIT is a second layer, not rind's constant-time guarantee (#542)
• Update README.md
• (hmac) HKDF-SHA256 expand is back to its earlier speed on x86_64 (#505)
• set rind to 0.3.3 so its next release is not breaking (#512)
• (readme) lead with the full benchmark heatmap (#507)
• [breaking] delete rind-instant-acme, which no consumer uses (#510)

rind-aws-lc-rs

1.0.3 - 2026-11-12

Added

• (agreement) [breaking] keys keep their public key and algorithm (#529)
• (cipher) [breaking] AES-CBC encryption takes a typed CbcIv (#530)

Fixed

• repair nightly checks and ARM AES key wiping (#513)
• (aws-lc-rs) offer exactly aws-lc-rs 1.x's API (#522)

Other

• ML-DSA-44, ML-DSA-65, and ML-DSA-87 (#610)
• fail on key-derived heap scratch freed unwiped (#581)

rind-jsonwebtoken

11.0.4 - 2026-11-12

Fixed

• (adapters) [breaking] rind-dimpl, rind-str0m, rind-jsonwebtoken, and rind-object-store match their upstream providers (#519)

rind-rustls

0.23.4 - 2026-11-12

Added

• HPKE (RFC 9180), and rind-rustls's HPKE suites for ECH (#585)
• (agreement) [breaking] keys keep their public key and algorithm (#529)

Fixed

• (release) return rind to 0.3.2 and set four adapter patch versions by hand (#548)
• (rustls) [breaking] rind-rustls is rustls's aws-lc-rs provider, item for item (#521)

rind-dimpl

0.9.4 - 2026-11-12

Fixed

• (adapters) [breaking] rind-dimpl, rind-str0m, rind-jsonwebtoken, and rind-object-store match their upstream providers (#519)

rind-object-store

0.14.4 - 2026-11-12

Fixed

• (adapters) [breaking] rind-dimpl, rind-str0m, rind-jsonwebtoken, and rind-object-store match their upstream providers (#519)

rind-rcgen

0.14.4 - 2026-11-12

Fixed

• (release) return rind to 0.3.2 and set four adapter patch versions by hand (#548)
• (rcgen) [breaking] KeyPair offers rcgen's KeyPair API (#515)
• (rustls) [breaking] rind-rustls is rustls's aws-lc-rs provider, item for item (#521)

rind-ring

0.17.4 - 2026-11-12

Added

• (agreement) [breaking] keys keep their public key and algorithm (#529)

Fixed

• (release) return rind to 0.3.2 and set four adapter patch versions by hand (#548)
• (rind-ring) [breaking] offer exactly ring 0.17's API and features (#516)

rind-str0m

0.25.3 - 2026-11-12

Fixed

• (adapters) [breaking] rind-dimpl, rind-str0m, rind-jsonwebtoken, and rind-object-store match their upstream providers (#519)
• (release) return rind to 0.3.2 and set four adapter patch versions by hand (#548)
• (rcgen) [breaking] KeyPair offers rcgen's KeyPair API (#515)

rind-python

0.2.0 - 2026-11-12

Added

• (release) publish pyrind-cryptography to PyPI (#618)
• (python) pyrind-cryptography, pyca's hazmat API on pyrind (#553)
• (agreement) [breaking] keys keep their public key and algorithm (#529)

Other

• (dart,python) say the bindings do not wipe (#549)

---

This PR was generated with release-plz.

[pullfrog]

✅ No new issues found.

Reviewed changes — the complete release-plz commit: version bumps, changelog entries, dependency-requirement updates, and lockfile regeneration across the workspace.

• rind 0.3.2 → 0.4.0 (breaking) — driven by #510's chore!: title (deleting the rind-instant-acme workspace crate, which was publish = false). rind's own published API is unchanged, and the PR body already marks the bump "✓ API compatible changes", so consumers only need a version-requirement bump.
• Adapter patch releases — all nine published adapters bump a patch and move their rind requirement to 0.4.0; rind-str0m's cross-deps on rind-dimpl/rind-rcgen track the new 0.9.4/0.14.4. No stale rind = "0.3.x" requirements remain anywhere in the workspace.
• rind-dart vs rind-python asymmetry is configured — rind-dart gets the dep bump but no release (its Dart package carries the version), while rind-python 0.1.3 is git_only = true in .release-plz.toml, versioned by tag for the PyPI wheel flow.
• Cargo.lock — workspace versions in sync, plus the configured dependencies_update = true picking up the semver-compatible transitive crypto-bigint 0.7.10 → 0.7.11 (pulled by elliptic-curve, rsa, rfc6979, etc.).
• Changelogs — entries match the PR titles and PR #510's actual impact; the remaining rind-instant-acme mentions are immutable changelog history and a historical quest document, correctly left alone. Compare links target the tags release-plz creates on merge.

  ^{｜ View workflow run ｜ Using glm-5.3 ｜ 𝕏}

[kixelated]

Skipped by /quest-run on 2026-11-11: the maintainer's pick was "merge if patch only", and this release is not. rind goes 0.3.2 to 0.4.0 and rind-python 0.1.2 to 0.2.0, both breaking bumps under 0.x semver. The rest (rind-dimpl, rind-jsonwebtoken, rind-object-store) are patch bumps.

Its two failing optional checks (the ctgrind row and dart (macos-15-intel)) also fail on main and are being fixed by the quest/m0/ctgrind-nightly.md and quest/m0/build-nightly.md quests.

(Written by Claude Opus 5.5 with high)