v1.0.0-rc5

Changelog

New Features

• d4a81b3: feat(cli): colorize --help section headers (@Nicolas-Peiffer)
• 827dd9e: feat(providers): enforce the KMS v2 annotation size budget (@Nicolas-Peiffer)

Bug Fixes

• 4cfe2e7: fix(providers): correct the KMS v2 ciphertext and plaintext bounds (@Nicolas-Peiffer)
• 91c4051: fix(providers): reject CKA_IDs too long to serve as a KMS v2 KeyId (@Nicolas-Peiffer)
• 5d625a6: fix(providers): validate CKA_LABEL on the key-rotation paths (@Nicolas-Peiffer)

Other

• 386c083: Update k8s-kms-plugin.drawio with eclipse (@Nicolas-Peiffer)
• 01be531: Update libs-imports-gose-crypto11-k8s-kms-plugin.svg eclipse migration (@Nicolas-Peiffer)
• 8ed08dc: doc: fix marmaid participant HSM name (@Nicolas-Peiffer)
• 8dcd3c9: doc: obsolete figures and diagrams are removed (@Nicolas-Peiffer)
• 7439429: doc: rm temp file (@Nicolas-Peiffer)
• ab447e6: docs(cli): document CKA_ID vs CKA_LABEL resolution, regenerate CLI reference (@Nicolas-Peiffer)
• 34aa5aa: docs(puml): refresh class diagrams for current P11/Provider shape, add ml-kem (@Nicolas-Peiffer)
• 2222ffb: refactor(providers): extract ML-KEM envelope format and parse helpers (@Nicolas-Peiffer)
• 6595fda: refactor(providers): name size limits by their unit and origin (@Nicolas-Peiffer)
• c9da0b4: refactor(providers): split p11.go into limits and ml-kem files (@Nicolas-Peiffer)
• 7c19927: style(test): clear golangci-lint findings in the fuzz and limits tests (@Nicolas-Peiffer)

Thanks to all contributors!