v0.9.0 - MDK

Retroactive source release boundary for the MDK workspace 0.9.0 version bump at commit a102b1966267c5bfcbe3a822212c0e343ac109ef.

What's Changed

• Rotate stale keyring entries when creating a new SQLite database by @erskingardner in #275
• [codex] Validate memory welcome payload sizes by @erskingardner in #276
• [codex] Redact sensitive storage Debug output by @erskingardner in #277
• [skip-changelog] Harden bindings packaging workflow trigger by @erskingardner in #278
• [codex] Prevent default plaintext Secret serialization by @erskingardner in #280
• [codex] Pin GitHub Actions to immutable SHAs [skip-changelog] by @erskingardner in #279
• [skip-changelog]: Bump actions/checkout from 4.3.1 to 6.0.2 by @dependabot[bot] in #285
• [skip-changelog]: Bump actions/github-script from 7.1.0 to 9.0.0 by @dependabot[bot] in #284
• [skip-changelog]: Bump dorny/paths-filter from 3.0.3 to 4.0.1 by @dependabot[bot] in #283
• [skip-changelog]: Bump actions/download-artifact from 4.3.0 to 8.0.1 by @dependabot[bot] in #282
• [skip-changelog]: Bump actions/setup-java from 4.8.0 to 5.2.0 by @dependabot[bot] in #281
• Add a default CODEOWNERS file by @erskingardner in #286
• [codex] Verify unsigned rumor IDs by @erskingardner in #287
• fix(ci): verify OpenSSL tarball SHA-256 in Android build script by @dannym-arx in #290
• security(mdk-uniffi): forbid unsafe_code at FFI boundary by @dannym-arx in #291
• Fix admin update rollback for local commits by @erskingardner in #289
• feat: extension v3 wire format + disappearing_message_secs schema (1/3) by @dannym-arx in #258
• ci: harden Kotlin packaging and coverage workflows by @dannym-arx in #292
• fix(storage): clean up processed_welcomes on delete_group by @dannym-arx in #293
• Fix legacy self-remove auto-commit by @erskingardner in #288
• [skip-changelog]: Combine low-risk Dependabot action updates by @erskingardner in #299
• Add UniFFI bindings for group capability APIs by @erskingardner in #301
• feat(mdk-core): accept caller-supplied d-tag for KeyPackage events by @erskingardner in #303
• Add optional audio display metadata to MIP-04 media tags by @erskingardner in #300
• [skip-changelog]: Bump artifact and setup-python GitHub Actions by @erskingardner in #305
• fix(security): sanitize welcome failure reasons and cap stored length by @dannym-arx in #307
• [skip-changelog]: Bump ruby/setup-ruby from 1.306.0 to 1.310.0 by @dependabot[bot] in #309
• fix(ci): build Swift package on macos-26-arm64 for iOS 26 SDK by @dannym-arx in #312
• fix(uniffi-kotlin): suppress java.awt warnings in consumer ProGuard rules by @dannym-arx in #313
• fix(ci): disable target/ cache for Swift packaging job by @dannym-arx in #314
• [skip-changelog]: Bump android-actions/setup-android from 3.2.2 to 4.0.1 by @dependabot[bot] in #311
• [skip-changelog]: Bump taiki-e/install-action from 2.77.7 to 2.79.3 by @dependabot[bot] in #310
• feat: validation + NIP-40 expiration + UniFFI surface for disappearing messages (2/3) by @dannym-arx in #306
• [codex] import Dark Matter implementation workspace by @erskingardner in #327
• Unify sensitive-material handling: zeroize secrets, redact Debug/FFI, enforce redaction at log/audit sinks (#379) by @erskingardner in #699
• Create local files, sockets, and on-disk artifacts restrictive-by-construction (#378) by @erskingardner in #698
• Bound and reclaim long-lived daemon/broker runtime state (#381) by @erskingardner in #700
• Couple admin-policy updates to member removals on send and validate paths by @erskingardner in #701
• Surface self-eviction instead of swallowing UseAfterEviction (SelfEvicted / realizing removal) by @erskingardner in #703
• Reject commits whose resulting GroupContext strips required app components by @erskingardner in #704
• Withdraw losing committer's group-state notifications via explicit invalidation event (#363) by @erskingardner in #702
• Materialize own confirmed commits as pre-validated convergence candidates (#706) by @erskingardner in #723
• Clear removed marker when branch selection supersedes the local member's removal by @erskingardner in #724
• Retire experimental darkmatter naming: mdk for the kit, wn for app binaries by @erskingardner in #725
• Enforce strict tag extraction and post-verification id trust at the Nostr ingest boundary by @erskingardner in #727
• Share one hardening profile between the direct and broker QUIC preview transports (#710) by @erskingardner in #729
• Close out #707: mirror ingest invariants on every seam, enforce quarantine, bound the deferred-peel lifecycle by @erskingardner in #726
• Docs refresh and workspace version bump to 0.9.0 by @erskingardner in #731

New Contributors

• @dependabot[bot] made their first contribution in #285

Full Changelog: v0.8.0...v0.9.0