base64-ng 1.0.5

[eldryoth]

base64-ng 1.0.5

Final planned 1.0.x cleanup release before pausing feature work for broader community testing.

Changed

• Split remaining large internals out of src/lib.rs:
  • src/ct.rs
  • src/errors.rs
  • src/length.rs
  • src/scalar.rs
  • src/wrap.rs
• Preserved the public API and crate-root exports.
• Updated release gates, unsafe-boundary checks, panic-policy checks, and package metadata for the new source layout.

Security / Hardening

• Removed a mem::forget pattern from secret string conversion.
• Added failed-state diagnostics to the stream encoder for unrecoverable internal errors.
• Hardened wipe_tail against incorrect future call sites.
• Promoted the encode_in_place internal invariant to a release-mode assertion.
• Expanded CT platform posture documentation for AArch64 and RISC-V.
• Clarified strict non-CT decode behavior on secret-oriented conversion helpers.

Verification

• GitHub CI: green
• Pentest: green
• scripts/checks.sh: passing
• Zero runtime dependencies remain unchanged
• Published crate package excludes local README image assets

---

This discussion was created from the release base64-ng 1.0.5.