TrustDB v2.0.0

What's Changed

• fix(dependabot): automate security update pull requests by @ryan-wong-coder in #393
• fix(dependabot): ignore invalid TiKV PD major update by @ryan-wong-coder in #395
• fix(dependabot): allow generated update branches by @ryan-wong-coder in #403
• fix(dependabot): queue grouped security updates by @ryan-wong-coder in #418
• fix(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 in the security-patches group across 1 directory by @dependabot[bot] in #414
• fix(dependabot): validate grouped security versions by @ryan-wong-coder in #425
• fix(deps): bump brace-expansion from 2.1.0 to 2.1.2 in /clients/web by @dependabot[bot] in #429
• fix(dependabot): prioritize security updates by @ryan-wong-coder in #434
• fix(deps): patch desktop brace-expansion by @ryan-wong-coder in #439
• docs(compliance): define China control matrix by @ryan-wong-coder in #489
• Refresh the website with a capability-first product narrative by @ryan-wong-coder in #491
• docs(onboarding): build an end-to-end user path by @ryan-wong-coder in #493
• fix(ci): bound website deployment verification by @ryan-wong-coder in #495
• docs(community): add public adoption entry points by @ryan-wong-coder in #505
• docs(github): add legacy issue template entry by @ryan-wong-coder in #507
• docs(brand): apply TrustDB mark to repository entry points by @ryan-wong-coder in #509
• docs(onboarding): clarify fit and community paths by @ryan-wong-coder in #511
• build(release): publish images to GHCR by @ryan-wong-coder in #516
• docs(website): sync registry and community links by @ryan-wong-coder in #518
• fix(batch): apply blocking backpressure to full queues by @ryan-wong-coder in #520
• docs(performance): publish current assessment by @ryan-wong-coder in #522
• feat(crypto): define immutable suite registry by @ryan-wong-coder in #525
• refactor(submission): share transport orchestration by @ryan-wong-coder in #526
• feat(formats): define crypto agility boundaries by @ryan-wong-coder in #527
• feat(config): add opt-in NATS ingress settings by @ryan-wong-coder in #530
• feat(formats): adopt clean-cut v2 migration by @ryan-wong-coder in #531
• feat(nats): define ingress wire contracts by @ryan-wong-coder in #533
• test(crypto): publish SM conformance baseline by @ryan-wong-coder in #534
• docs(compliance): publish national crypto threat model by @ryan-wong-coder in #537
• feat(nats): bootstrap optional JetStream ingress by @ryan-wong-coder in #538
• feat(anchor): add subprocess gRPC plugins by @ryan-wong-coder in #540
• feat(nats): process ingress deliveries safely by @ryan-wong-coder in #541
• refactor(crypto): add provider-neutral signing contracts by @ryan-wong-coder in #543
• feat(nats): persist bounded immutable outcomes by @ryan-wong-coder in #544
• feat(proofstore): bind namespaces to immutable crypto suites by @ryan-wong-coder in #546
• feat(nats): wire optional ingress into serve by @ryan-wong-coder in #547
• feat(crypto): add SM3 and RFC6962 Merkle profiles by @ryan-wong-coder in #548
• feat(crypto): add canonical SM2-SM3 signatures by @ryan-wong-coder in #549
• feat(crypto): add versioned key descriptors by @ryan-wong-coder in #550
• feat(sdk): add optional NATS ingress client by @ryan-wong-coder in #553
• docs(nats): publish ingress operations guide by @ryan-wong-coder in #555
• feat(keystore): add SM2 key lifecycle support by @ryan-wong-coder in #556
• docs(website): add NATS ingress onboarding by @ryan-wong-coder in #558
• feat(nats): expose ingress runtime metrics by @ryan-wong-coder in #561
• feat(status): add selective record status notifications by @ryan-wong-coder in #562
• feat(transport): add TLS and mutual TLS support by @ryan-wong-coder in #565
• feat(crypto): add authenticated SM4 software key envelopes by @ryan-wong-coder in #567
• feat(anchor): add anchor-system semantic facade by @ryan-wong-coder in #564
• feat(crypto): add supervised signer plugins by @ryan-wong-coder in #566
• feat(bcos): pin and verify FISCO BCOS compatibility baseline by @ryan-wong-coder in #568
• feat(bcos): define versioned anchor payload and trust config by @ryan-wong-coder in #572
• feat(bcos): add immutable TrustDBAnchorV1 contract by @ryan-wong-coder in #573
• feat(pkcs11): add isolated signing provider by @ryan-wong-coder in #574
• feat(sdf): add optional hardware signing provider by @ryan-wong-coder in #575
• fix(deps): bump github.com/ethereum/go-ethereum from 1.13.10 to 1.17.0 in /scripts/fisco-bcos/smoke-client by @dependabot[bot] in #571
• feat(server): enable CN_SM_V1 evidence generation by @ryan-wong-coder in #576
• fix(deps): bump golang.org/x/crypto from 0.44.0 to 0.52.0 in /scripts/fisco-bcos/smoke-client by @dependabot[bot] in #570
• feat(sproof): add national-cryptography offline evidence v2 by @ryan-wong-coder in #577
• feat(sdk): add SM2 and SM3 support by @ryan-wong-coder in #578
• feat(fiscobcos): add standard-crypto anchor client by @ryan-wong-coder in #579
• feat(tlcp): add the Guomi transport profile by @ryan-wong-coder in #580
• feat(bcos): persist immutable anchor evidence by @ryan-wong-coder in #581
• feat(bcos): verify receipt inclusion offline by @ryan-wong-coder in #583
• feat(desktop): add national-cryptography identities and offline verification by @ryan-wong-coder in #582
• feat(bcos): verify static PBFT finality offline by @ryan-wong-coder in #584
• fix(anchor): harden BCOS retry quorum recovery by @ryan-wong-coder in #585
• test(crypto): add CN_SM_V1 interoperability gates by @ryan-wong-coder in #586
• fix(deps): bump brace-expansion from 2.1.2 to removed in /clients/desktop/frontend in the security-patches group across 1 directory by @dependabot[bot] in #587
• feat(fiscobcos): support Guomi SM2 and SM3 networks by @ryan-wong-coder in #588
• fix(ci): tolerate empty FISCO Air readiness logs by @ryan-wong-coder in #591
• feat(fisco-bcos): verify validator-set transitions offline by @ryan-wong-coder in #589
• fix(fisco-bcos): bind genesis checkpoint by chain identity and add four-node offline qualification gates by @ryan-wong-coder in #592
• docs(fisco-bcos): add operator runbook for deployment, custody, and recovery by @ryan-wong-coder in #593
• Refresh comprehensive Chinese user and operations documentation by @ryan-wong-coder in #599
• fix(config): expose WAL segment policy in YAML by @ryan-wong-coder in #598
• fix(ci): cover durable BCOS changes in qualification gate by @ryan-wong-coder in #595
• feat(backup): add authenticated logical backup v5 by @ryan-wong-coder in #600
• feat(admin): add compliance-grade RBAC separation by @ryan-wong-coder in #601
• feat(audit): add immutable security audit and trusted-time evidence by @ryan-wong-coder in #602
• feat(config): enforce China deployment profiles by @ryan-wong-coder in #603
• fix(release): add offline-verifiable supply-chain gates by @ryan-wong-coder in #604
• fix(release): prepare v2.0.0-rc.1 by @ryan-wong-coder in #606
• fix(release): make manifest media types deterministic by @ryan-wong-coder in #608
• docs(release): disclose v2.0.0-rc.1 verifier limitation by @ryan-wong-coder in #609
• fix(docs): consume published artifacts by default by @ryan-wong-coder in #611
• fix(release): prepare v2.0.0-rc.2 by @ryan-wong-coder in #613
• fix(docker): correct the container baseline by @ryan-wong-coder in #615
• docs: add proof and storage glossary by @mgalore in #616
• fix(ci): pin external actions to immutable commits by @ryan-wong-coder in #619
• fix(release): prepare v2.0.0 stable by @ryan-wong-coder in #620

New Contributors

• @mgalore made their first contribution in #616

Full Changelog: v1.0.0...v2.0.0