C2PA Tool release notes

info

For additional release notes for versions 0.9.x and earlier, see Archived release notes.

# Changelog

All changes to C2PA Tool are documented in this file. For additional information on versions 0.9.x and earlier, see the Archived release motes.

This project adheres to Semantic Versioning, except that – as is typical in the Rust community – the minimum supported Rust version may be increased without a major version increase.

Since version 0.10.0, the format of this changelog is based on Keep a Changelog.

0.16.5

25 April 2025

Fixed

• Enable post_validate_async for WASI (#1052)

0.16.4

16 April 2025

Documented

• Remove instructions to install c2patool using binstall (#1038)

Fixed

• Dynamic assertions should be gathered assertions (#1005)

0.16.3

07 April 2025

Fixed

• Adjust dependencies to avoid security warnings and yanked versions (#1031)

0.16.2

04 April 2025

Fixed

• Update openssl to address a recently-announced vulnerability (#1024)

0.16.1

26 March 2025

• Update to latest c2pa-crypto crate

0.15.0

18 March 2025

Added

• Adds reader.post_validate method for CAWG validation support (#976)
• Add WASI to c2patool (#945)

Fixed

• Remove circular dependency between C2PA and CAWG crates (#982)

Updated dependencies

• Bump env_logger from 0.11.6 to 0.11.7 (#963)

0.13.3

11 February 2025

Fixed

• Trigger a release of c2patool to pick up latest c2pa-rs changes

0.13.1

31 January 2025

Fixed

• Trigger a release of c2patool to pick up latest c2pa-rs changes (#895)

0.13.0

29 January 2025

Added

• Claim v2 (#707)

0.12.0

22 January 2025

Added

• Change the definition of Signer.raw_signer() to return an Option defaulting to None (#869)

0.11.1

18 January 2025

Fixed

• Upload a distinct SBOM per platform (#856)

0.11.0

16 January 2025

Added

• Move COSE signing into c2pa_crypto crate (#807)

Documented

• Post move cleanup (#778)

Fixed

• Fix: Obscure glob error message for missing files

0.10.2

12 December 2024

Fixed

• No-op change to trigger new c2patool build
• Update makefile for c2patool's new location in c2pa-rs workspace

0.10.1

12 December 2024

Fixed

• No-op change to trigger new c2patool release

0.10.0

12 December 2024

Added

• Updates c2patool to use only the new Builder/Reader API (contentauth/c2patool#297)

Documented

• Update Contributing guide, misc minor edits (contentauth/c2patool#296)

Fixed

• Compile c2pa-crypto with cargo check (#768)

Other

• Move c2patool source code into c2pa-rs repo (#723)
• Move profile settings to workspace Cargo.toml
• Enlarged description of c2pa command-line behavior (contentauth/c2patool#285)

0.9.12

18 October 2024

• fix: Update c2pa-rs for RegionOfInterest support. (contentauth/c2patool#269)
• Fix broken link that was causing os site workflow to fail (contentauth/c2patool#266)
• Bump codecov/codecov-action from 3 to 4 (contentauth/c2patool#242)
• chore: Run all CI jobs when user is dependabot[bot]
• chore: Debug CI again
• chore: Format for consistency with c2pa-rs CI workflow (contentauth/c2patool#265)
• chore: Don't skip CI jobs for non-pull-request events
• chore: Retry debug
• chore: Debug action context
• chore: Skip CodeCov upload for non-member PRs (contentauth/c2patool#263)
• Bump EmbarkStudios/cargo-deny-action from 1 to 2 (contentauth/c2patool#245)
• chore: Adjust conditions for running CI jobs (contentauth/c2patool#261)

0.9.11

16 October 2024

• Merge hardening bug fixes (contentauth/c2patool#260)

0.9.10

07 October 2024

• Update c2ptool to use latest c2pa-rs (contentauth/c2patool#258)

0.9.9

17 September 2024

• Pull in latest bug fixes (contentauth/c2patool#237)
• Document fragment subcommand (contentauth/c2patool#236)
• Switch back to using pull_request instead of pull_request_target trigger
• Bump actions/checkout from 3 to 4 (contentauth/c2patool#243)
• Remove no-longer-maintained clippy-check action (contentauth/c2patool#238)

0.9.8

30 August 2024

• Initial fragment support (contentauth/c2patool#230)
• Add warning about accessing a private key directly (contentauth/c2patool#218)

0.9.7

15 August 2024

• Update to latest c2pa SDK (contentauth/c2patool#222)
• Remove rust toolchain version lock (contentauth/c2patool#221)
• Update security guidance to link to SECURITY.md (contentauth/c2patool#217)

0.9.6

30 July 2024

• Pull latest c2pa-rs bug fixes into c2patool (contentauth/c2patool#212)
• only run tests/clippy if labeled (contentauth/c2patool#205)
• Bump env_logger from 0.10.2 to 0.11.4 (contentauth/c2patool#204)
• Updates cargo packages and cargo.deny file. (contentauth/c2patool#200)

0.9.5

18 July 2024

• Update to lastest c2pa-rs (contentauth/c2patool#197)
• added security.md (contentauth/c2patool#196)

0.9.4

25 June 2024

• Update c2patool (contentauth/c2patool#190)
• Match c2pa-rs minimum toolchain version and test in CI (contentauth/c2patool#188)
• Document how to specify an icon (contentauth/c2patool#182)

0.9.3

29 May 2024

• Remove binary modules (contentauth/c2patool#179)

0.9.2

24 May 2024

• Remove integration tests for now due to extraneous binaries (contentauth/c2patool#178)

0.9.1

22 May 2024

• Add better support for cargo-binstall (contentauth/c2patool#177)

0.9.0

07 May 2024

• Integrate with c2pa-rs 0.32.0, various test case fixes. (contentauth/c2patool#175)
• Add HTTP source option for trust config (contentauth/c2patool#174)

0.8.2

28 March 2024

• fixed c2patool asset name (contentauth/c2patool#171)

0.8.1

25 March 2024

• use c2pa-rs 0.31.1 for actions.changes support (contentauth/c2patool#170)

0.8.0

20 March 2024

• allow clients to sign with a process outside of c2patool (contentauth/c2patool#169)
• Add trust and verification options to c2pa_tool (contentauth/c2patool#168)
• adds version to c2patool artifact names (contentauth/c2patool#158)

0.7.0

22 November 2023

• updates to c2pa-rs v0.28.2 (contentauth/c2patool#153)
• Update to c2pa-rs 0.28.1

0.6.2

05 October 2023

• update to c2pa 0.27.1 (contentauth/c2patool#146)
• Merge branch 'main' of https://github.com/contentauth/c2patool
• Add Do not train example
• Upgrade to c2pa-rs 0.26.0 (contentauth/c2patool#143)
• Fix issue with docusaurus styling and fix broken links (contentauth/c2patool#138)
• Updates to c2pa-rs 0.25.1 (contentauth/c2patool#128)
• Fix windows release (contentauth/c2patool#132)

0.6.1

24 July 2023

• use compress-archive instead of tar (contentauth/c2patool#130)

0.6.0

22 June 2023

• update to c2pa-rs 0.24.0 (contentauth/c2patool#127)

0.5.4

13 June 2023

• integrate c2pa 23.0 bump version (contentauth/c2patool#126)
• Merge branch 'main' of https://github.com/contentauth/c2patool
• c2pa-rs 23.0 + updated test
• Update README.md (contentauth/c2patool#124)

0.5.3

04 May 2023

• Parent Ingredient JSON (contentauth/c2patool#123)

0.5.2

19 April 2023

• Ingredient thumbnails, extension cleanup, toolkit update (contentauth/c2patool#120)

0.5.1

10 April 2023

• Update README.md (contentauth/c2patool#118)
• Update expired sample certs (contentauth/c2patool#113)

0.5.0

28 March 2023

• New ingredient support and c2pa file formats (contentauth/c2patool#111)
• Leverage new Manifest & Ingredient, add Ingredient creation. (contentauth/c2patool#107)

0.4.0

01 March 2023

• Add --certs and --tree options (contentauth/c2patool#106)
• update to cp2pa 0.17.0 (contentauth/c2patool#105)
• Update for Clippy in Rust 1.67 (contentauth/c2patool#101)

0.3.9

06 December 2022

• update to c2pa-rs 0.16.0
• allows clients to output manifest report to specified directory (contentauth/c2patool#91)

0.3.8

09 November 2022

• Bump c2pa from 0.13.2 to 0.15.0 (contentauth/c2patool#87)
• Build infrastructure improvements (contentauth/c2patool#85)
• Fix new Clippy warning in Rust 1.65 (contentauth/c2patool#84)
• Readme updates (contentauth/c2patool#62)

0.3.7

22 September 2022

• Treat a source asset with a manifest store as a default parent (contentauth/c2patool#76)
• Fetch remote manifests for --info (contentauth/c2patool#75)

0.3.6

16 September 2022

• Update Cargo.lock when publishing crate (contentauth/c2patool#71)
• [IGNORE] update readme --info (contentauth/c2patool#70)
• Update Cargo.lock to 0.3.5

0.3.5

15 September 2022

• Upgrade cpufeatures to non-yanked version (contentauth/c2patool#68)
• Add --info option (contentauth/c2patool#65)
• Updated publish workflow to upload binaries to GitHub (contentauth/c2patool#58)
• Fix Make release script & update readme (contentauth/c2patool#55)
• (Some version history omitted as we worked on some release process issues)

0.3.0

18 August 2022

• Rework c2patool parameters (contentauth/c2patool#53)
• Update to 0.11.0 c2pa-rs (contentauth/c2patool#38)
• Remove Homebrew, Git installation methods, and add "update" wording (contentauth/c2patool#33)

0.2.1

29 June 2022

• Add BMFF support for video & etc (contentauth/c2patool#25)

0.2.0

28 June 2022

• Upgrade to c2pa Rust SDK version 0.6.0 (contentauth/c2patool#24)
• Fix an error in the README documentation (contentauth/c2patool#23)
• Display help if there are no arguments on the command line (contentauth/c2patool#21)
• Bump anyhow from 1.0.57 to 1.0.58 (contentauth/c2patool#17)
• Updates examples to use ta_url instead of ta (contentauth/c2patool#15)

0.1.3

17 June 2022

• Update to latest c2pa Rust SDK (contentauth/c2patool#12)
• Add built-in default certs to make getting started easier (contentauth/c2patool#9)

0.1.2

10 June 2022

• Update crate's description field

0.1.1

10 June 2022

• Initial public release