Release v0.0.5

What's Changed

• fix(cd): npm post-release verify node dual-target glue
• fix(cd): drop crates.io API curl from post-release verify
• fix(cd): verify published lib-q via crates.io resolve, not cargo install
• fix(ci): stabilize K12 memory-access timing smoke on shared runners
• fix(cd): configure npm registry auth for @Lib-q scoped publish
• fix(cd): allow npm OIDC publish when NPM_TOKEN is unset
• fix(cd): retry crates.io publish on 429 rate limit
• fix(ci): stabilize ML-DSA hardened dudect verify smoke on noisy runners
• chore(release): bump workspace to 0.0.5
• fix(ci): extend all-algorithms test matrix timeout to 90 minutes
• feat: SCA self-cert, lattice wire v0, official HQC KATs, and hardened paths
• fix(cd): simplify WASM build conditions in CI workflow
• docs(ci): npm publish auth troubleshooting for CD recovery
• ci: add workflow_dispatch npm-only publish for CD recovery

Installation

Rust

cargo add lib-q

Node.js

npm install @lib-q/core

Security

This release contains only NIST-approved post-quantum cryptographic algorithms.
All operations are constant-time and side-channel resistant.

Documentation

• API Documentation
• Security Model
• Development Guide