c2pa-c-ffi-v0.90.13

04 August 2026

Fixed

• Emscripten build which lost its header (backport #2395) (#2396)

c2pa-v0.90.15

What's Changed

• fix: Hardening against potential deep recursion in update manifests with parent cycles (backport #2493) by @caiopensrc in #2501
• chore: release by @caiopensrc in #2502

Full Changelog: c2pa-v0.90.14...c2pa-v0.90.15

c2pa-v0.90.14

What's Changed

• fix: Diamond inputTo manifest exponential reverifications depending on ingredient paths reachability (backport #2492) by @caiopensrc in #2498
• chore: release by @caiopensrc in #2499

Full Changelog: c2pa-v0.90.13...c2pa-v0.90.14

c2pa-v0.90.13

What's Changed

• fix(sdk): Parse PEM cert chain to DER for RemoteSigner (backport #2414) by @caiopensrc in #2481
• chore: release by @caiopensrc in #2495

Full Changelog: c2pa-v0.90.12...c2pa-v0.90.13

c2patool-v0.27.12

What's Changed

• fix(sdk): Validate inputTo ingredients against manifest tampering (#2… by @mpgopala in #2476
• ci: Reinstate the safe to test label in version-controlled labels (backport #2422) by @caiopensrc in #2423
• update: bump sha1 from 0.10.7 to 0.11.0 (backport #2456) by @caiopensrc in #2473
• fix: Avoid QoS runtime detection warning (backport #2467) by @caiopensrc in #2482
• fix: Preserve identity assertions in split-signing paths (backport #2421) by @scouten-adobe in #2465
• chore: release by @caiopensrc in #2479

Full Changelog: c2patool-v0.27.11...c2patool-v0.27.12

c2patool-v0.27.11

What's Changed

• fix(sdk): Prevent panic on out-of-range timestamp in GeneralizedTime conversion (backport #2469) by @caiopensrc in #2474
• chore: release by @caiopensrc in #2470
• chore: release by @caiopensrc in #2475

Full Changelog: c2patool-v0.27.10...c2patool-v0.27.11

c2pa-c-ffi-v0.90.12

04 August 2026

Fixed

• Emscripten build which lost its header (backport #2395) (#2396)

c2pa-c-ffi-v0.90.11

04 August 2026

Fixed

• Emscripten build which lost its header (backport #2395) (#2396)

c2pa-v0.90.12

What's Changed

• fix(sdk): Validate inputTo ingredients against manifest tampering (#2… by @mpgopala in #2476
• ci: Reinstate the safe to test label in version-controlled labels (backport #2422) by @caiopensrc in #2423
• update: bump sha1 from 0.10.7 to 0.11.0 (backport #2456) by @caiopensrc in #2473
• fix: Avoid QoS runtime detection warning (backport #2467) by @caiopensrc in #2482
• fix: Preserve identity assertions in split-signing paths (backport #2421) by @scouten-adobe in #2465
• chore: release by @caiopensrc in #2479

Full Changelog: c2pa-v0.90.11...c2pa-v0.90.12

c2pa-v0.90.11

What's Changed

• fix(sdk): Prevent panic on out-of-range timestamp in GeneralizedTime conversion (backport #2469) by @caiopensrc in #2474
• chore: release by @caiopensrc in #2470
• chore: release by @caiopensrc in #2475

Full Changelog: c2pa-v0.90.10...c2pa-v0.90.11