Bump version to 2.0.0 and add the 2.0.0 ChangeLog - #76
Merged
Merged
Conversation
There was a problem hiding this comment.
🟡 Changes recommended
The new 2.0.0 notes/ChangeLog describe features from PRs that are still open, so the release documentation can be factually incorrect if merged/backported prematurely.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
Prepares the wolfCOSE 2.0.0 release by bumping the public version macros and adding consolidated 2.0.0 release notes in the top-level ChangeLog and docs release-notes.
Changes:
- Update
LIBWOLFCOSE_VERSION_STRING/LIBWOLFCOSE_VERSION_HEXto 2.0.0. - Refresh
README.md“current release” blurb for 2.0.0. - Add a new 2.0.0 section to
ChangeLog.mdanddocs/Release-Notes.md.
File summaries
| File | Description |
|---|---|
| README.md | Updates the “current release” summary to 2.0.0. |
| include/wolfcose/version.h | Bumps the library version string and hex constant to 2.0.0. |
| docs/Release-Notes.md | Adds a 2.0.0 release-notes section summarizing changes since 1.0.0. |
| ChangeLog.md | Adds a 2.0.0 ChangeLog section with detailed release notes. |
Review details
- Files reviewed: 4/4 changed files
- Comments generated: 2
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
aidangarske
force-pushed
the
release-2.0.0
branch
from
September 7, 2026 19:34
af0f667 to
251b75b
Compare
aidangarske
marked this pull request as ready for review
September 17, 2026 19:01
aidangarske
force-pushed
the
release-2.0.0
branch
from
September 17, 2026 20:50
251b75b to
61f7e03
Compare
mattia-moffa
approved these changes
Sep 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps wolfCOSE to 2.0.0 and publishes the complete release notes for all 27 PRs merged since 1.0.0.
The release adds HSS/LMS signatures, RFC 9338 countersignatures, RFC 9783 PSA/EAT attestation, RFC 9864 fully specified signature algorithms, experimental COSE-HPKE, delegated signing, expanded key and CBOR APIs, interoperability coverage, and parser and key-handling hardening. No CVEs were assigned for this release.
Compatibility
WOLFCOSE_KEYgained delegated-signing and internal key-type tracking fields. Applications must be recompiled against the 2.0.0 headers. Code that initializes keys withwc_CoseKey_Init()and attaches keys through thewc_CoseKey_Set*()APIs does not need source changes.New messages use the RFC 9864 fully specified signature IDs. Existing messages using the deprecated RFC 9053
ES256,ES384,ES512, orEdDSAIDs requireWOLFCOSE_ENABLE_DEPRECATED_ALGS; changing a protected algorithm ID requires re-signing the message.Validation
The
ci:releasequalification run passed at candidate commit61f7e033c2b124dab812001df10fea014c8c8123.wolfcose-2.0.0.tar.gz,wolfcose-2.0.0.zip, andwolfcose-2.0.0.sha256artifacts were downloaded and their checksums verified locally.