release 0.2.0: iroh 1.0-rc.0 / gossip 0.99

.gitignore

@@ -32,6 +32,9 @@ lcov.info
 # jj (Jujutsu) workspace
 .jj/
 
+# Claude Code session state
+.claude/
+
 # Direnv
 .envrc
 .direnv/

CHANGELOG.md

@@ -6,6 +6,32 @@ format is based on [Keep a Changelog], and this project adheres to
 
 ## [Unreleased]
 
+## [0.2.0] — 2026-05-11
+
+### Changed
+
+- **Breaking:** bumped `iroh` to `=1.0.0-rc.0` and `iroh-gossip` to `0.99`.
+  Public API exposes iroh types (`Endpoint`, `SecretKey`, `PublicKey`,
+  `iroh_gossip::api::*`), so consumers must move to the iroh 1.0-rc.0
+  ecosystem in lockstep.
+- **Breaking:** bumped `ed25519-dalek` to `=3.0.0-pre.7` to match
+  iroh-base 1.0.0-rc.0. The version is pinned with `=` because iroh-base
+  itself hard-pins the pre-release; drop the `=` when iroh-base relaxes.
+- Loosened the `sha2` pin from `=0.11.0-rc.5` to `^0.11`. iroh-base
+  1.0.0-rc.0 no longer hard-pins the rc, so we follow the same
+  caret-range convention as the rest of the crypto stack.
+- Bumped transitive crypto deps via `cargo update`: `mainline` 6.0.1 →
+  6.1.2, plus the usual sweep of tokio/hyper/rustls patches.
+
+### Notes
+
+- No source changes were required: the iroh/gossip APIs we touch
+  (`Endpoint::builder`, `endpoint::presets::N0`, `SecretKey::generate`,
+  `PublicKey`, `iroh_gossip::api::{Event, GossipSender}`) survived the
+  bump verbatim.
+- All 96 lib tests, property tests, and integration tests pass against
+  the new stack.
+
 ## [0.1.0] — 2026-04-22
 
 First public release. Passphrase-based peer rendezvous for iroh-gossip

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "iroh-gossip-rendezvous"
-version = "0.1.0"
+version = "0.2.0"
 edition = "2024"
 rust-version = "1.93.0"
 authors = ["Stephen Waits <steve@waits.net>"]
@@ -17,6 +17,7 @@ exclude = [
     ".github/",
     ".cargo/",
     ".config/",
+    ".claude/",
     "deny.toml",
     "justfile",
     "CODEOWNERS",
@@ -87,24 +88,22 @@ name = "keys"
 harness = false
 
 [dependencies]
-iroh = "0.98"
-iroh-gossip = "0.98"
+iroh = "=1.0.0-rc.0"
+iroh-gossip = "0.99"
 mainline = { version = "6", features = ["async"] }
 # Crypto stack — several deps are pinned by transitive constraints. See
 # `UPGRADING.md` or the release notes on any bump.
 #
-# * `ed25519-dalek = 2`: 3.0 is pre-release (`3.0.0-pre.6`). Move to 3 once stable.
+# * `ed25519-dalek = "=3.0.0-pre.7"`: matched to iroh 1.0.0-rc.0 / iroh-base 1.0.0-rc.0.
 # * `chacha20poly1305 = 0.10`: 0.11 is `rc`. Same story.
-# * `sha2 = "=0.11.0-rc.5"`: hard-pinned by `iroh-base` (which depends on
-#   `sha2 = "=0.11.0-rc.5"`). Drop the `=` once iroh-base relaxes the pin.
 # * `hkdf = 0.13`: works as of mainline 6.1.2, which loosened its `digest`
 #   pin to `0.11`. The HKDF-SHA256 KAT covers compatibility — bump only if
 #   it still passes byte-for-byte.
 # * `rand = 0.9`: 0.10 is coordinated with iroh + bridge; hold until iroh bumps.
-ed25519-dalek = "2"
+ed25519-dalek = "=3.0.0-pre.7"
 chacha20poly1305 = "0.10"
 hkdf = "0.13"
-sha2 = "=0.11.0-rc.5"
+sha2 = "0.11"
 blake3 = "1"
 zeroize = { version = "1", features = ["derive"] }
 rand = "0.9"